SuSE 10 Security Update : Apache (ZYPP Patch Number 7722)
High Nessus Plugin ID 57155
SynopsisThe remote SuSE 10 host is missing a security-related patch.
DescriptionThis update fixes a remote denial of service bug (memory exhaustion) in the Apache 2 HTTP server, that could be triggered by remote attackers using multiple overlapping Request Ranges. (CVE-2011-3192)
It also fixes a bug, where the LimitRequestFieldsize config option into account when parsing headers from backend, thereby avoiding that the receiving buffers are too small.
SolutionApply ZYPP patch number 7722.