CVE-2019-0196

CVE-2019-0196

Name

CVE-2019-0196

Description

A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Third Party Advisory	https://www.debian.org/security/2019/dsa-4422
Third Party Advisory	https://usn.ubuntu.com/3937-1/
Third Party Advisory	https://support.f5.com/csp/article/K44591505
Mailing List	https://seclists.org/bugtraq/2019/Apr/5
Mailing List	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTJPHI3E3OKW7OT7COQXVG7DE7IDQ2OT/
Mailing List	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/
Mailing List	https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E
Mailing List	https://lists.apache.org/thread.html/97a1c58e138ed58a364513b58d807a802e72bf6079ff81a10948ef7c@%3Ccvs.httpd.apache.org%3E
Vendor Advisory	https://httpd.apache.org/security/vulnerabilities_24.html
VDB Entry	http://www.securityfocus.com/bid/107669
Mailing List	http://www.openwall.com/lists/oss-security/2019/04/02/1
Release Notes	http://www.apache.org/dist/httpd/CHANGES_2.4.39
Mailing List	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
Mailing List	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html
Mailing List	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html
CONFIRM	https://security.netapp.com/advisory/ntap-20190617-0002/
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRYD6JMEJ6O3JKJZFNOYXMJJU5JMEJK/
MISC	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
MLIST	https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E
CONFIRM	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us
MISC	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
REDHAT	https://access.redhat.com/errata/RHSA-2019:3933
REDHAT	https://access.redhat.com/errata/RHSA-2019:3935
REDHAT	https://access.redhat.com/errata/RHSA-2019:3932
MLIST	https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E
N/A	https://www.oracle.com/security-alerts/cpuapr2020.html
MLIST	https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9@%3Ccvs.httpd.apache.org%3E
MLIST	https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d@%3Ccvs.httpd.apache.org%3E

Type

URI

Third Party Advisory

https://www.debian.org/security/2019/dsa-4422

Third Party Advisory

https://usn.ubuntu.com/3937-1/

Third Party Advisory

https://support.f5.com/csp/article/K44591505

Mailing List

https://seclists.org/bugtraq/2019/Apr/5

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTJPHI3E3OKW7OT7COQXVG7DE7IDQ2OT/