CVE-2011-0419: Medium severity ibm engineering requirements management doors web access vulnerability
Apache Portable Runtime (APR) is vulnerable to a denial of service, caused by an error in the aprfnmatch() function when processing specific patterns with the "" wildcard. A remote attacker could exploit this vulnerability to consume all available CPU and memory resources resulting in a denial of service.
Other sources
It was discovered that apr's implementation of the fnmatch function - aprfnmatch - did not limit number of recursive calls used when matching input string against the pattern. Sufficiently complex pattern and sufficient long input could cause aprfnmatch to consume a lot of CPU time while processing such input.
It was reported that httpd exposes this problem via at least modautoindex module, which allows remote users to specify pattern via P=pattern request query argument:
http://httpd.apache.org/docs/2.2/mod/modautoindex.html#query
It seems this issue was already corrected in upstream SVN via a complete fnmatch implementation re-write including following commits:
http://svn.apache.org/viewvc?view=revision&revision=1098188 http://svn.apache.org/viewvc?view=revision&revision=1098289 http://svn.apache.org/viewvc?view=revision&revision=1098799 http://svn.apache.org/viewvc?view=revision&revision=1098902
Acknowledgement:
Red Hat would like to thank Maksymilian Arciemowicz for reporting this issue.
— Red Hat
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via ? sequences in the first argument, as demonstrated by attacks against modautoindex in httpd.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0419?
CVE-2011-0419 has a severity rating that indicates it can cause a denial of service due to high CPU and memory consumption.
How do I fix CVE-2011-0419?
To fix CVE-2011-0419, you should update the Apache Portable Runtime or the affected Apache HTTP Server to the latest version.
Which software is affected by CVE-2011-0419?
CVE-2011-0419 affects Apache Portable Runtime versions up to 1.4.3 and various versions of the Apache HTTP Server.
Can CVE-2011-0419 be exploited remotely?
Yes, CVE-2011-0419 can be exploited remotely by an attacker through specially crafted patterns that utilize the "*" wildcard.
What impact does CVE-2011-0419 have on systems?
The impact of CVE-2011-0419 is a denial of service, which can lead to system instability or unresponsiveness.