CVE-2011-0419
MEDIUM severity · CVSS 4.3 · Resource exhaustion
4.3CVSS MEDIUM
Summary
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impactNone
Availability impact—
Exploit probability (EPSS)49%
AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected products we track (3)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://cxib.net/stuff/apache.fnmatch.phps ↗
Additional information
- NVD record
- http://cxib.net/stuff/apache.fnmatch.phpsPatch
- http://httpd.apache.org/security/vulnerabilities_22.htmlAdvisory
- http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22Advisory
- http://cxib.net/stuff/apr_fnmatch.txtsAdvisory
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlAdvisory
- http://marc.info/?l=bugtraq&m=131551295528105&w=2Advisory
- http://marc.info/?l=bugtraq&m=131731002122529&w=2Advisory