CVE-2011-0419

43

FAUCET Score

CVE-2011-0419 describes a stack consumption vulnerability in the fnmatch implementation of the Apache Portable Runtime (APR) library and various operating systems' libc, including Apache HTTP Server, NetBSD, OpenBSD, FreeBSD, Apple Mac OS X, Oracle Solaris, and Android. An unauthenticated attacker can exploit this by sending specially crafted *? sequences, leading to a denial of service due to excessive CPU and memory consumption. While the CVSS score is moderate (4.3), its FAUCET Risk Score is high (97/100), indicating a significant potential impact despite a medium attack complexity. There is no evidence of active exploitation, but an ExploitDB entry exists, and there is minimal community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 1.4.3CPE matchmatch criteria	cpe:2.3:a:apache:portable_runtime::::::::
		>= 2.0.0, <= 2.0.65CPE matchmatch criteria	cpe:2.3:a:apache:http_server::::::::
		>= 2.2.0, <= 2.2.18CPE matchmatch criteria	cpe:2.3:a:apache:http_server::::::::
		10.6.0CPE matchmatch criteria	cpe:2.3:o:apple:mac_os_x:10.6.0:::::::*
		All Versions ImpactedCPE matchmatch criteria	cpe:2.3:o:freebsd:freebsd::::::::

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

8.6

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

30.41%

Probability of exploitation in next 30 days

EPSS Percentile

98.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

ExploitDB: EDB-35738 · May 12, 2011

This CVE's current EPSS score of 0.3041 is in the 99th percentile among its peer group of 19,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (158)

redhatpatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: antlr-0:2.7.7-7.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: bcel-0:5.2-8.1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: ant-0:1.7.1-13.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: cglib-0:2.2-5.1.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: dom4j-0:1.6.1-11.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: ecj-1:3.3.1.1-3.2.2.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: glassfish-jaf-0:1.1.0-6.1.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: glassfish-javamail-0:1.4.2-0.4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: glassfish-jsf-0:1.2_13-2.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: hibernate3-1:3.3.2-1.5.GA_CP04.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: hibernate3-annotations-0:3.4.0-3.3.GA_CP04.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: httpd22-0:2.2.17-14.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-beanutils-0:1.8.0-4.1.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-chain-0:1.2-2.2.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-codec-0:1.3-9.1.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-collections-0:3.2.1-4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-daemon-1:1.0.5-1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-el-0:1.0-19.2.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-httpclient-1:3.1-1.1.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-launcher-0:1.1-4.6.1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-modeler-0:2.0-4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-commons-validator-0:1.3.1-7.5.1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-oro-0:2.0.8-3.3.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jakarta-taglibs-standard-0:1.1.1-9.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: javassist-0:3.12.0-1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jboss-common-core-0:2.2.17-1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jboss-common-logging-jdk-0:2.1.2-1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jboss-common-logging-spi-0:2.1.2-1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jboss-javaee-0:5.0.1-2.9.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jcommon-0:1.0.16-1.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: log4j-0:1.2.14-18.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: mod_cluster-0:1.0.10-2.GA_CP01.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: mod_jk-0:1.2.31-1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: mx4j-1:3.0.1-9.3.4.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: regexp-0:1.5-1.2.1.jdk6.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: struts12-0:1.2.9-3.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: tomcat5-0:5.5.33-14_patch_04.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: tomcat6-0:6.0.32-15_patch_03.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: tomcat-jkstatus-ant-0:1.2.31-2.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: tomcat-native-0:1.1.20-2.0.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: xalan-j2-0:2.7.1-5.3_patch_04.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: xerces-j2-0:2.9.1-3.patch01.1.ep5.el4

redhatpatch availablevia redhat_api

Product: JBEWS 1.0 for RHEL 4Fixed in: xml-commons-1:1.3.04-7.12.ep5.el4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 4Fixed in: apr-0:0.9.4-25.el4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: apr-0:1.2.7-11.el5_6.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: apr-0:1.3.9-3.el6_0.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: ant-0:1.7.1-13.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: antlr-0:2.7.7-7.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: cglib-0:2.2-5.1.1.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: dom4j-0:1.6.1-11.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: ecj3-1:3.3.1.1-3.1.1.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: glassfish-jsf-0:1.2_13-3.1.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: hibernate3-1:3.3.2-1.4.GA_CP04.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: hibernate3-annotations-0:3.4.0-3.2.GA_CP04.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: httpd-0:2.2.17-11.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-beanutils-0:1.8.0-4.1.2.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-chain-0:1.2-2.2.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-codec-0:1.3-9.2.1.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-collections-0:3.2.1-4.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-daemon-1:1.0.5-1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-httpclient-1:3.1-1.2.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-commons-validator-0:1.3.1-7.5.2.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-oro-0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jakarta-taglibs-standard-0:1.1.1-9.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: javassist-0:3.12.0-1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jboss-common-core-0:2.2.17-1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jboss-common-logging-jdk-0:2.1.2-1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jboss-common-logging-spi-0:2.1.2-1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jboss-javaee-0:5.0.1-2.9.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jcommon-0:1.0.16-1.2.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: mod_cluster-0:1.0.10-2.1.GA_CP01.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: mod_cluster-native-0:1.0.10-2.1.GA_CP01.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: mod_jk-0:1.2.31-1.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: struts12-0:1.2.9-3.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: tomcat5-0:5.5.33-16_patch_04.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: tomcat6-0:6.0.32-15.1_patch_03.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: tomcat-jkstatus-ant-0:1.2.31-2.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: tomcat-native-0:1.1.20-2.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: xalan-j2-0:2.7.1-5.3_patch_04.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: xerces-j2-0:2.9.1-3.patch01.1.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 5Fixed in: xml-commons-0:1.3.04-7.10.jdk6.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: ant-0:1.7.1-14.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: antlr-0:2.7.7-7.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: cglib-0:2.2-5.4.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: dom4j-0:1.6.1-11.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: ecj3-1:3.3.1.1-4.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: glassfish-jsf-0:1.2_13-3.1.4.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: hibernate3-1:3.3.2-1.8.GA_CP04.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: hibernate3-annotations-0:3.4.0-3.5.GA_CP04.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.3.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: hibernate3-entitymanager-0:3.4.0-4.4.GA_CP04.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: httpd-0:2.2.17-11.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-beanutils-0:1.8.0-9.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-chain-0:1.2-2.2.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-codec-0:1.3-12.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-collections-0:3.2.1-4.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-daemon-1:1.0.5-1.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-dbcp-0:1.2.1-16.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-digester-0:1.8.1-8.1.1.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-fileupload-1:1.1.1-7.5.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-httpclient-1:3.1-1.2.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-io-0:1.4-4.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-logging-0:1.1.1-1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-logging-jboss-0:1.1-10.2.2.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-pool-0:1.3-15.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-commons-validator-0:1.3.1-7.5.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-oro-0:2.0.8-7.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jakarta-taglibs-standard-0:1.1.1-12.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: javassist-0:3.12.0-3.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jboss-common-core-0:2.2.17-1.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jboss-common-logging-jdk-0:2.1.2-1.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jboss-common-logging-spi-0:2.1.2-1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jboss-javaee-0:5.0.1-2.9.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jcommon-0:1.0.16-1.2.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: jfreechart-0:1.0.13-2.3.2.1.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: mod_cluster-0:1.0.10-2.2.GA_CP01.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: mod_cluster-native-0:1.0.10-2.1.1.GA_CP01.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: mod_jk-0:1.2.31-1.1.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: objectweb-asm31-0:3.1-12.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: struts12-0:1.2.9-3.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: tomcat5-0:5.5.33-15_patch_04.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: tomcat6-0:6.0.32-14_patch_03.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: tomcat-jkstatus-ant-0:1.2.31-2.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: tomcat-native-0:1.1.20-2.1.2.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: xalan-j2-0:2.7.1-5.3_patch_04.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: xerces-j2-0:2.9.1-8.patch01.1.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1 for RHEL 6Fixed in: xml-commons-0:1.3.04-7.14.ep5.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 1.0

Vendor Advisories (1)

redhatCVE-2011-0419Moderate

apr: unconstrained recursion in apr_fnmatch

References

cvsweb.netbsd.org / bsdweb.cgi/src/lib/libc/gen/fnmatch.c

Third Party Advisory

cxib.net / stuff/apache.fnmatch.phps

PatchThird Party Advisory

cxib.net / stuff/apr_fnmatch.txts

Third Party Advisory

httpd.apache.org / security/vulnerabilities_22.html

Vendor Advisory

lists.apple.com / archives/Security-announce/2011//Oct/msg00003.html

Broken Link

lists.opensuse.org / opensuse-security-announce/2011-11/msg00011.html

Mailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingPatchThird Party Advisory

secunia.com / advisories/44490

Not ApplicableVendor Advisory

secunia.com / advisories/44564

Not ApplicableVendor Advisory

secunia.com / advisories/44574

Not ApplicableVendor Advisory

secunia.com / advisories/48308

Not Applicable

securityreason.com / achievement_securityalert/98

ExploitThird Party Advisory

securityreason.com / securityalert/8246

ExploitThird Party Advisory

securitytracker.com / id

Broken LinkThird Party AdvisoryVDB Entry

lists.apache.org / thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

lists.apache.org / thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Third Party AdvisoryVDB Entry

lists.apache.org / thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E

Third Party Advisory

oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638

Third Party Advisory

oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804

Third Party Advisory

support.apple.com / kb/HT5002

Third Party Advisory

svn.apache.org / viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c

PatchVendor Advisory

svn.apache.org / viewvc

PatchVendor Advisory

svn.apache.org / viewvc

PatchVendor Advisory

apache.org / dist/apr/Announcement1.x.html

PatchVendor Advisory

apache.org / dist/apr/CHANGES-APR-1.4

Broken Link

apache.org / dist/httpd/Announcement2.2.html

PatchVendor Advisory

debian.org / security/2011/dsa-2237

Third Party Advisory

mail-archive.com / dev%40apr.apache.org/msg23960.html

Mailing ListThird Party Advisory

mail-archive.com / dev%40apr.apache.org/msg23961.html

Mailing ListThird Party Advisory

mail-archive.com / dev%40apr.apache.org/msg23976.html

Mailing ListThird Party Advisory

mandriva.com / security/advisories

Broken Link

mandriva.com / security/advisories

Broken Link

openbsd.org / cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c

Broken Link

oracle.com / technetwork/topics/security/cpujul2012-392727.html

Third Party Advisory

oracle.com / technetwork/topics/security/cpujuly2013-1899826.html

Third Party Advisory

redhat.com / support/errata/RHSA-2011-0507.html

Third Party Advisory

redhat.com / support/errata/RHSA-2011-0896.html

Third Party Advisory

redhat.com / support/errata/RHSA-2011-0897.html

Third Party Advisory