vulnerability

FreeBSD: VID-CF2105C6-551B-11E9-B95C-B499BAEBFEAF (CVE-2019-0196): Apache -- Multiple vulnerabilities

Try Surface Command
Back to search
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 1, 2019
Added
Apr 2, 2019
Modified
Jun 14, 2019

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.


From VID-CF2105C6-551B-11E9-B95C-B499BAEBFEAF:




The Apache httpd Project reports:



Apache HTTP Server privilege escalation from modules' scripts


(CVE-2019-0211) (important)


mod_auth_digest access control bypass (CVE-2019-0217)


(important)


mod_ssl access control bypass (CVE-2019-0215) (important)


mod_http2, possible crash on late upgrade (CVE-2019-0197) (low)


mod_http2, read-after-free on a string compare (CVE-2019-0196)


(low)


Apache httpd URL normalization inconsistincy (CVE-2019-0220)


(low)




Solution

freebsd-upgrade-package-apache24

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today