NVD

Id
7488  
Name
CVE-2011-0419  
Description
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-05-16  
Modified Date
2013-11-15  
Seq
2011-0419  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42152 7488 CVE-2011-0419 http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22  View
42153 7488 CVE-2011-0419 http://cxib.net/stuff/apache.fnmatch.phps  View
42154 7488 CVE-2011-0419 http://cxib.net/stuff/apr_fnmatch.txts  View
42155 7488 CVE-2011-0419 http://httpd.apache.org/security/vulnerabilities_22.html  View
42156 7488 CVE-2011-0419 APPLE-SA-2011-10-12-3  View
42157 7488 CVE-2011-0419 SUSE-SU-2011:1229  View
42158 7488 CVE-2011-0419 SSRT100606  View
42159 7488 CVE-2011-0419 SSRT100626  View
42160 7488 CVE-2011-0419 HPSBMU02704  View
42161 7488 CVE-2011-0419 SSRT100966  View
42162 7488 CVE-2011-0419 oval:org.mitre.oval:def:14638  View
42163 7488 CVE-2011-0419 oval:org.mitre.oval:def:14804  View
42164 7488 CVE-2011-0419 20110512 Multiple Vendors libc/fnmatch(3) DoS (incl apache)  View
42165 7488 CVE-2011-0419 8246  View
42166 7488 CVE-2011-0419 1025527  View
42167 7488 CVE-2011-0419 http://support.apple.com/kb/HT5002  View
42168 7488 CVE-2011-0419 http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029&r2=1098902  View
42169 7488 CVE-2011-0419 http://svn.apache.org/viewvc?view=revision&revision=1098188  View
42170 7488 CVE-2011-0419 http://svn.apache.org/viewvc?view=revision&revision=1098799  View
42171 7488 CVE-2011-0419 http://www.apache.org/dist/apr/Announcement1.x.html  View
42172 7488 CVE-2011-0419 http://www.apache.org/dist/apr/CHANGES-APR-1.4  View
42173 7488 CVE-2011-0419 http://www.apache.org/dist/httpd/Announcement2.2.html  View
42174 7488 CVE-2011-0419 DSA-2237  View
42175 7488 CVE-2011-0419 [dev] 20110510 Re: fnmatch rewrite in apr, apr 1.4.3  View
42176 7488 CVE-2011-0419 [dev] 20110510 Re: Apache Portable Runtime 1.4.4 [...] Released  View
42177 7488 CVE-2011-0419 [dev] 20110511 Re: Apache Portable Runtime 1.4.4 [...] Released  View
42178 7488 CVE-2011-0419 MDVSA-2011:084  View
42179 7488 CVE-2011-0419 MDVSA-2013:150  View
42180 7488 CVE-2011-0419 http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15  View
42181 7488 CVE-2011-0419 http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html  View
42182 7488 CVE-2011-0419 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
42183 7488 CVE-2011-0419 RHSA-2011:0507  View
42184 7488 CVE-2011-0419 RHSA-2011:0896  View
42185 7488 CVE-2011-0419 RHSA-2011:0897  View
42186 7488 CVE-2011-0419 https://bugzilla.redhat.com/show_bug.cgi?id=703390  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31398 JVNDB-2011-001638 Apache Portable Runtime ライブラリなどの製品で使用される apr_fnmatch.c および fnmatch.c におけるサービス運用妨害 (CPU とメモリ消費) の脆弱性 Apache Portable Runtime (APR) ライブラリおよび Apache HTTP Server の apr_fnmatch.c 内にある fnmatch 実装や、NetBSD、OpenBSD、FreeBSD、Apple Mac OS X、Oracle Solaris 10 および Android などの製品で使用される libc の fnmatch.c には、サービス運用妨害 (CPU および メモリ消費) となる脆弱性が存在します。 CVE-2011-0419 48326 CVE-2011-0419 7488 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001638.html 2011-03-10 2015-04-22 View