CVE:CVE-2011-0419
CNNVD:CNNVD-201105-160
APR(Apache portable Run-time libraries，Apache可移植运行库)的目的如其名称一样，主要为上层的应用程序提供一个可以跨越多操作系统平台使用的底层支持接口库。NetBSD是NetBSD基金会开发的一套免费开源的类Unix操作系统。
Apache Portable Runtime (APR)库1.4.3之前版本，Apache HTTP Server 2.2.18之前版本的apr_fnmatch.c中存在栈消耗漏洞。该漏洞是由于“fnmatch()”函数的实现没有正确限制它的递归调用，远程攻击者可以借助first参数中的*?序列导致拒绝服务（CPU和内存消耗）。
solution:Upgrade apache portable_runtime to a higher version than 1.4.3,and avoid the version (,1.4.3]; Upgrade apache http_server to a higher version than 2.0.65,2.2.19,and avoid the version [2.0.35,2.0.65],[2.2.0,2.2.19); Upgrade apple mac_os_x to a higher version than 10.6.0,and avoid the version 10.6.0; Upgrade freebsd freebsd to a higher version than *; Upgrade google android to a higher version than *; Upgrade netbsd netbsd to a higher version than 5.1,and avoid the version 5.1; Upgrade openbsd openbsd to a higher version than 4.8,and avoid the version 4.8; Upgrade oracle solaris to a higher version than 10,and avoid the version 10; Upgrade debian debian_linux to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade suse linux_enterprise_server to a higher version than 10:sp3,and avoid the version 10:sp3