Stack Consumption Vulnerability in Apache Portable Runtime and HTTP Server

CVE-2011-0419

Summary

A stack consumption vulnerability exists in the fnmatch function of the Apache Portable Runtime (APR) library and the Apache HTTP Server, as well as in the libc implementations across various operating systems, including NetBSD, OpenBSD, FreeBSD, Apple Mac OS X, Oracle Solaris, and Android. This flaw allows context-dependent attackers to exploit crafted input patterns, particularly sequences involving wildcards, leading to denial of service through excessive CPU and memory usage. Such attacks may disrupt service availability by overwhelming the system's resources.

References