DeutschShown in its original language — a full translation is planned for a future version.
Apache HTTP Server: Mehrere Schwachstellen
view advisory published 2019-04-02
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Apache HTTP Server ausnutzen, um seine Rechte zu erweitern, Sicherheitsrestriktionen zu umgehen oder um einen Denial of Service Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-0197US | medium4.2 | — | ||
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from… | ||||
| CVE-2019-0196US | medium5.3 | — | ||
A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison… | ||||
| CVE-2019-0220US | medium5.3 | — | ||
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMa… | ||||
| CVE-2019-0211US | high7.8OT critical | KEV | ||
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by… | ||||
| CVE-2019-0217US | high7.5 | Exploit | ||
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate… | ||||
| CVE-2019-0215US | high7.5 | — | ||
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured ac… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2019:2343 vom 2019-09-18external
- Juniper Security Advisory JSA11023 vom 2020-07-08external
- SUSE Security Update SUSE-SU-2019:0873-1 vom 2019-04-04external
- Red Hat Security Advisory RHSA-2019:0746 vom 2019-04-11external
- Red Hat Security Advisory RHSA-2019:0980 vom 2019-05-07external
- Red Hat Security Advisory RHSA-2019:1296 vom 2019-05-30external
- Red Hat Security Advisory RHSA-2019:1297 vom 2019-05-30external
- Red Hat Security Advisory RHSA-2019:1543 vom 2019-06-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan