oss-security - CVE assignment Apache httpd multiple-range DoS ("Apache Killer")

Message-ID: <1108241017100.21645@mjc.redhat.com>
Date: Wed, 24 Aug 2011 10:22:18 +0100 (BST)
From: Mark J Cox <mjc@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE assignment Apache httpd multiple-range DoS ("Apache Killer") -
 CVE-2011-3192

This thread is on the full-disclosure mailing list:
http://marc.info/?t=131379269200002&r=1&w=2
leading to this upstream discussion:
http://marc.info/?t=131409787700005&r=1&w=2

It is an escalation of server memory usage, and a plausible candidate 
for a CVE, so I've assigned CVE-2011-3192.

Thanks, Mark

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.