CVE-2011-3192

EXPLOITED IN THE WILD LAB

Apache HTTP Server 1.3.x 2.0.35-2.0.64 2.2.0-2.2.19 - Denial of Service via Range Header Overlap

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2011-3192 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 7 public exploits from researchers including kingcope, tkisason, futurezayka, including a Metasploit module auxiliary/dos/http/apache_range_dos.

AI-analyzed exploit summary This exploit targets a memory exhaustion vulnerability in Apache httpd by sending malformed HTTP Range headers. It uses multiple forks to amplify the attack, leading to remote denial of service (DoS) by exhausting system resources.

Description

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Exploits (7)

exploitdb WORKING POC
by kingcope · perldosmultiple
https://www.exploit-db.com/exploits/17696

This exploit targets a memory exhaustion vulnerability in Apache httpd by sending malformed HTTP Range headers. It uses multiple forks to amplify the attack, leading to remote denial of service (DoS) by exhausting system resources.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Apache httpd (versions affected by CVE-2014-5329)
No auth needed
Prerequisites: Network access to the target Apache server
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 14 stars
by tkisason · poc
https://github.com/tkisason/KillApachePy

This is a Python-based proof-of-concept exploit for CVE-2011-3192, which targets a denial-of-service vulnerability in Apache HTTP Server via crafted Range headers. The script automates the attack by spawning multiple threads to send malicious requests, aiming to choke the server.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Apache HTTP Server (multiple versions)
No auth needed
Prerequisites: Network access to the target Apache server
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC
by futurezayka · dos
https://github.com/futurezayka/CVE-2011-3192

This is a functional proof-of-concept exploit for CVE-2011-3192, targeting a denial-of-service vulnerability in Apache HTTP Server via malformed Range headers. It includes both a vulnerability test and an active exploitation mode using asynchronous HTTP requests.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Apache HTTP Server 2.2.x (prior to 2.2.20)
No auth needed
Prerequisites: Network access to the target Apache server · Python 3.7+ with aiohttp and colorama libraries
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec STUB
by stcmjp · poc
https://github.com/stcmjp/cve-2011-3192

The repository contains only a Dockerfile with no actual exploit code or technical details. It references CVE-2011-3192 but provides no functional PoC, analysis, or vulnerability context.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Apache HTTP Server (unspecified version)
No auth needed
Prerequisites: Docker environment
devstral-2 · analyzed Feb 16, 2026 Full analysis →
vulncheck_xdb WORKING POC
dos
https://gitlab.com/ntkernel/KillApachePy

This repository contains a functional Python-based exploit for CVE-2011-3192, which targets a denial-of-service (DoS) vulnerability in Apache HTTP Server via malformed Range headers. The script automates the attack by spawning multiple threads to send crafted requests, overwhelming the server.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Apache HTTP Server (multiple versions)
No auth needed
Prerequisites: Python 2.5.x-2.7.x · network access to target Apache server
devstral-2 · analyzed Feb 25, 2026 Full analysis →
exploitdb WORKING POC
cdoslinux
https://www.exploit-db.com/exploits/18221

This exploit targets CVE-2011-3192, a denial-of-service vulnerability in Apache HTTP Server. It sends malformed HTTP requests with overlapping byte ranges to trigger excessive resource consumption, causing the server to crash.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Apache HTTP Server (versions 1.3.x, 2.0.x, 2.2.x)
No auth needed
Prerequisites: Network access to the target Apache server
devstral-2 · analyzed Feb 19, 2026 Full analysis →
metasploit WORKING POC
by Kingcope, Masashi Fujiwara · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_range_dos.rb

This Metasploit module exploits CVE-2011-3192, a denial-of-service vulnerability in Apache HTTP Server versions 2.0.x through 2.0.64 and 2.2.x through 2.2.19. It triggers excessive memory and CPU consumption by sending malformed Range headers with overlapping byte ranges.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Apache HTTP Server 2.0.x-2.0.64, 2.2.x-2.2.19
No auth needed
Prerequisites: Network access to the target Apache server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (72)

Core 72
Core References
Not Applicable, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45606
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1369.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1329.html
Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=131731002122529&w=2
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00011.html
Issue Tracking, Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134987041210674&w=2
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1330.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00006.html
Third Party Advisory x_refsource_confirm
http://www.gossamer-threads.com/lists/apache/dev/401638
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025960
Exploit, Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=732928
Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=133477473521382&w=2
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/17696
Exploit, Issue Tracking, Vendor Advisory x_refsource_confirm
https://issues.apache.org/bugzilla/show_bug.cgi?id=51714
Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=131551295528105&w=2
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46000
Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=132033751509019&w=2
Third Party Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b90d73.shtml
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1199-1
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:130
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/49303
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/74721
Broken Link mailing-list x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0285.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/69396
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46126
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1245.html
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46125
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/405811
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2011/Aug/175
Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=133951357207000&w=2
Third Party Advisory x_refsource_confirm
http://support.apple.com/kb/HT5002
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00010.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1294.html
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1300.html
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45937

Scores

EPSS 0.9046
EPSS Percentile 99.6%

Lab Environment

COMMUNITY SUSPICIOUS
Community Lab
docker pull stcmjp/cve-2011-3192:latest
+1 more repos

Details

VulnCheck KEV 2011-08-24
InTheWild.io 2021-06-06
CWE
CWE-400
Status published
Products (11)
apache/http_server 2.0.35 - 2.0.65
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 10.10
canonical/ubuntu_linux 11.04
opensuse/opensuse 11.3
opensuse/opensuse 11.4
suse/linux_enterprise_server 10 sp2 (3 CPE variants)
suse/linux_enterprise_server 11 sp1 (2 CPE variants)
suse/linux_enterprise_software_development_kit 10 sp3 (2 CPE variants)
... and 1 more
Published Aug 29, 2011
Tracked Since Feb 18, 2026