Skip to content
OpenAdvisories
Unscored RHSA-2011:1391 2 CVEs

Red Hat Security Advisory: httpd security and bug fix update

Published Sep 15, 2024 · Updated May 15, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server httpd 0:2.2.15-9.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server httpd-debuginfo 0:2.2.15-9.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server httpd-devel 0:2.2.15-9.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server httpd-manual 0:2.2.15-9.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server httpd-tools 0:2.2.15-9.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server mod_ssl 1:2.2.15-9.el6_1.3

Vulnerabilities 2

  • Unscored —
    CVE-2011-3348 EPSS 22%

    The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configur…

    apache2 Debian
  • Unscored —
    CVE-2011-3368 Public exploit EPSS 91%

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…

    apache2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://rhn.redhat.com/errata/RHSA-2011-1245.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=736592
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=736690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=740045
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1391.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3348
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3348
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3348
  • article
    http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21
  • report
    https://access.redhat.com/security/cve/CVE-2011-3368
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3368
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3368
  • article
    http://www.contextis.com/research/blog/reverseproxybypass/