{"id":"CVE-2011-3348","aliases":["BELL-CVE-2011-3348","DEBIAN-CVE-2011-3348","EUVD-2011-3312","GHSA-vqqq-3xjq-cg84","RHSA-2011:1391","RHSA-2012:0542"],"status":"published","title":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with...","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.2238,"percentile":0.9771,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2011-09-19T15:00:00Z","modified":"2026-10-23T17:47:43Z","fixes":[{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.2.21-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.2.21-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.2.21-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.21-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.21-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.21-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-9.el6_1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-9.el6_1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-9.el6_1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-9.el6_1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-9.el6_1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-9.el6_1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.17-15.4.ep5.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-15.4.ep5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.17-15.4.ep5.el6"}]}],"bundled":6}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"redhat","product":"jboss_enterprise_web_server"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69804","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://support.apple.com/kb/HT5130","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1391.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14941","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0543.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:168","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Broken Link","Mailing List","article","web"]},{"url":"http://community.jboss.org/message/625307","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","advisory","evidence"]},{"url":"http://www.securityfocus.com/bid/49616","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0542.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.apache.org/dist/httpd/Announcement2.2.html","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://www.securitytracker.com/id?1026054","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18154","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/46013","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Vendor Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3348","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-vqqq-3xjq-cg84"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2011-3348","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-3348","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1391","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1245.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740045","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1391.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3348","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3368","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3368","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3368","tags":["advisory"]},{"url":"http://www.contextis.com/research/blog/reverseproxybypass/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0542","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1329.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785069","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0542.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0031","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0053","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-3348","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","status":"published","published":"2011-09-19T15:00:00Z","modified":"2024-08-06T23:29:56.738Z","updated_at":"2026-11-02T14:35:36.968002Z"}],"euvd":[{"id":"EUVD-2011-3312","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","status":"published","published":"2011-09-19T15:00:00Z","modified":"2024-08-06T23:29:56Z","updated_at":"2026-11-03T01:39:52.044449Z"}],"ghsa":[{"id":"GHSA-vqqq-3xjq-cg84","title":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with...","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","status":"published","published":"2022-05-13T01:09:52Z","modified":"2025-04-11T03:51:38Z","cwes":["CWE-400"],"updated_at":"2026-11-02T15:01:09.612717Z"}],"nvd":[{"id":"CVE-2011-3348","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","status":"published","published":"2011-09-20T05:55:02.983Z","modified":"2026-06-16T23:33:07.193Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:02:09.988332Z"}],"osv":[{"id":"BELL-CVE-2011-3348","title":"CVE-2011-3348 does not affect BellSoft software","status":"withdrawn","published":"2011-09-20T05:55:00Z","modified":"2026-01-28T07:21:12.814666Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"}],"updated_at":"2026-11-02T15:28:12.886815Z"},{"id":"CVE-2011-3348","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","status":"published","published":"2011-09-20T05:55:02Z","modified":"2026-04-10T03:41:57.51968Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-3348","description":"The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary \"error state\" in the backend server) via a malformed HTTP request.","status":"published","published":"2011-09-20T05:55:02.983Z","modified":"2026-10-23T17:47:43.450369557Z","updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"RHSA-2011:1391","title":"Red Hat Security Advisory: httpd security and bug fix update","status":"published","published":"2024-09-15T19:32:04Z","modified":"2026-05-15T10:45:46.181191Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2012:0542","title":"Red Hat Security Advisory: httpd security and bug fix update","status":"published","published":"2024-09-15T19:33:21Z","modified":"2026-05-15T10:46:08.337587Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}