Description
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | apache2 | 2.2.19-2 | — |
| Debian 13 | apache2 | 2.2.19-2 | — |
| Debian 12 | apache2 | 2.2.19-2 | — |
| Debian 6.0 | apache2 | 2.2.16-6+squeeze2 | DSA-2298-1 |
| Debian 5.0 | apache2 | 2.2.9-10+lenny10 | DSA-2298-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | httpd +3 | 2.2.15-9.el6_1.2 | RHSA-2011:1245 |
| RHEL 6 | mod_ssl | 1:2.2.15-9.el6_1.2 | RHSA-2011:1245 |
| RHEL 5 | httpd +2 | 2.2.3-45.el5_6.2 | RHSA-2011:1294, RHSA-2011:1245 |
| RHEL 5 | mod_ssl | 1:2.2.3-45.el5_6.2 | RHSA-2011:1294, RHSA-2011:1245 |
| RHEL 4 | httpd +3 | 2.0.52-48.ent | RHSA-2011:1245 |
| RHEL 4 | mod_ssl | 1:2.0.52-48.ent | RHSA-2011:1245 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Mission Critical 5 | httpd +2 | 2.2.3-22.el5_3.3 | RHSA-2011:1294 |
| Red Hat Rhel Mission Critical 5 | mod_ssl | 1:2.2.3-22.el5_3.3 | RHSA-2011:1294 |
| Red Hat Rhel Application Stack 2 | httpd +2 | 2.2.13-3.el5s2 | RHSA-2011:1369 |
| Red Hat Rhel Application Stack 2 | mod_ssl | 1:2.2.13-3.el5s2 | RHSA-2011:1369 |
| RHEL 6.0 EUS | httpd +3 | 2.2.15-5.el6_0.1 | RHSA-2011:1294 |
| RHEL 6.0 EUS | mod_ssl | 1:2.2.15-5.el6_0.1 | RHSA-2011:1294 |
| RHEL 3 ELS | httpd +1 | 2.0.46-78.ent | RHSA-2011:1300 |
| RHEL 3 ELS | mod_ssl | 1:2.0.46-78.ent | RHSA-2011:1300 |
| Red Hat JBoss Web Server 1 | httpd +3 | 2.2.17-13.2.ep5.el6 | RHSA-2011:1329 |
| Red Hat JBoss Web Server 1 | httpd22 +6 | 2.2.17-16.ep5.el4 | RHSA-2011:1329 |
| Red Hat JBoss Web Server 1 | mod_ssl | 1:2.2.17-13.2.ep5.el6 | RHSA-2011:1329 |
| Red Hat JBoss Web Server 1 | mod_ssl22 | 1:2.2.17-16.ep5.el4 | RHSA-2011:1329 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache2 | 2.4.23-4.1 | openSUSE-SU-2024:10268-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Apache Range Header DoS (Apache Killer)
auxiliary/dos/http/apache_range_dos
Exploit-DB 2
- Apache - Denial of Service EDB-18221 · dos · Dec 9, 2011
- Apache - Remote Memory Exhaustion (Denial of Service) EDB-17696 · dos · Aug 19, 2011
GitHub 4 repositories
-
tkisason/KillApachePy ★ 16 · Oct 26, 2011
Python Apache Killer (Range Header DoS CVE-2011-3192)
-
bluedragonsecurity/CVE-2011-3192-apache-exploit ★ 2 · May 14, 2026
CVE-2011-3192 - Remote Apache DOS for Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius (ev1lut10n / w1sdom)
-
futurezayka/CVE-2011-3192 ★ 0 · Sep 16, 2023
-
stcmjp/cve-2011-3192 ★ 0 · Apr 9, 2020
This Repository use to test Apache Killer (cve-2011-3192).
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 7
- RHSA-2011:1245 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1369 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · May 15, 2026
- RHSA-2011:1329 Red Hat Security Advisory: httpd and httpd22 security update Red Hat Security Advisories (RHSA) · May 15, 2026
- RHSA-2011:1300 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · May 15, 2026
- RHSA-2011:1294 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · May 15, 2026
- DSA-2298-1 apache2 - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10268-1 apache2-2.4.23-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 45606 third-party-advisory
- RHSA-2011:1369 vendor-advisory
- RHSA-2011:1329 vendor-advisory
- HPSBUX02707 vendor-advisory
- SUSE-SU-2011:1010 vendor-advisory
- SSRT100966 vendor-advisory
- openSUSE-SU-2011:0993 vendor-advisory
- http://www.gossamer-threads.com/lists/apache/dev/401638
- 1025960 vdb-entry
- [dev] 20110823 Re: DoS with mod_deflate & range requests mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=732928
- http://www.oracle.com/technetwork/topics/security/alert-cve-2011-3192-485304.html
- SSRT100624 vendor-advisory
- 17696 exploit
- https://issues.apache.org/bugzilla/show_bug.cgi?id=51714
- HPSBUX02702 vendor-advisory
- 46000 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
- http://blogs.oracle.com/security/entry/security_alert_for_cve_2011
- SSRT100619 vendor-advisory
- 20110830 Apache HTTPd Range Header Denial of Service Vulnerability vendor-advisory
- USN-1199-1 vendor-advisory
- MDVSA-2011:130 vendor-advisory
- 49303 vdb-entry
- 74721 vdb-entry
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- 20110824 Re: Apache Killer mailing-list
- APPLE-SA-2011-10-12-3 vendor-advisory
- oval:org.mitre.oval:def:14824 vdb-entry signature
- [announce] 20110824 Advisory: Range header DoS vulnerability Apache HTTPD 1.3/2.x \(CVE-2011-3192\) mailing-list
- RHSA-2011:1330 vendor-advisory
- apache-http-byterange-dos(69396) vdb-entry
- 46126 third-party-advisory
- RHSA-2011:1245 vendor-advisory
- oval:org.mitre.oval:def:18827 vdb-entry signature
- http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
- http://www.apache.org/dist/httpd/Announcement2.2.html
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
- 46125 third-party-advisory
- VU#405811 third-party-advisory
- 20110820 Apache Killer mailing-list
- SSRT100852 vendor-advisory
- http://support.apple.com/kb/HT5002
- SUSE-SU-2011:1216 vendor-advisory
- oval:org.mitre.oval:def:14762 vdb-entry signature
- SUSE-SU-2011:1007 vendor-advisory
- SUSE-SU-2011:1000 vendor-advisory
- RHSA-2011:1294 vendor-advisory
- MDVSA-2013:150 vendor-advisory
- SUSE-SU-2011:1229 vendor-advisory
- RHSA-2011:1300 vendor-advisory
- 45937 third-party-advisory
- [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list
- [httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilit mailing-list