Added CVE-2011-3192

2026-11-07 08:36:19 -10:00 · 2025-09-09 18:18:53 +08:00
1 changed files with 64 additions and 0 deletions
@@ -0,0 +1,64 @@
+id: CVE-2011-3192
+
+info:
+  name: Apache Range Header - Denial of Service
+  author: alperenkesk
+  severity: high
+  description: |
+    Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 contain a denial of service vulnerability caused by the byterange filter processing overlapping ranges in Range headers, allowing remote attackers to cause memory and CPU exhaustion.
+  impact: |
+    Attackers can cause denial of service by exhausting server memory and CPU resources, leading to service unavailability.
+  remediation: |
+    Update to Apache HTTP Server 2.2.20 or later, or apply vendor-provided patches. Configure proper rate limiting and resource controls.
+  reference:
+    - https://hackerone.com/reports/88904
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-3192
+    - https://httpd.apache.org/security/CVE-2011-3192.txt
+    - https://issues.apache.org/bugzilla/show_bug.cgi?id=51714
+  classification:
+    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:C
+    cvss-score: 7.8
+    cve-id: CVE-2011-3192
+    cwe-id: CWE-400
+    epss-score: 0.92987
+    epss-percentile: 0.99767
+    cpe: cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
+  metadata:
+    verified: true
+    max-request: 8
+    vendor: apache
+    product: http_server
+    shodan-query: cpe:"cpe:2.3:a:apache:http_server"
+  tags: cve,cve2011,apache,dos,kev
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/favicon.ico"
+      - "{{BaseURL}}/favicon.jpg"
+      - "{{BaseURL}}/favicon.png"
+      - "{{BaseURL}}/site.jpg"
+      - "{{BaseURL}}/site.png"
+      - "{{BaseURL}}/logo.jpg"
+      - "{{BaseURL}}/logo.png"
+      - "{{BaseURL}}/robots.txt"
+
+    headers:
+      Range: "bytes=0-1023"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 206
+
+      - type: word
+        part: header
+        words:
+          - "Content-Type: multipart/byteranges"
+
+      - type: word
+        part: header
+        words:
+          - "server: Apache"
+        condition: or