CVE-2019-10097

Name
CVE-2019-10097
Description
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory https://httpd.apache.org/security/vulnerabilities_24.html
MISC https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
REDHAT https://access.redhat.com/errata/RHSA-2019:4126
MLIST https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E
N/A https://www.oracle.com/security-alerts/cpuapr2020.html
MISC https://www.oracle.com/security-alerts/cpujul2020.html
MISC https://www.oracle.com/security-alerts/cpuoct2020.html
MLIST https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9@%3Ccvs.httpd.apache.org%3E
MLIST https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d@%3Ccvs.httpd.apache.org%3E

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* http_server >= 2.4.32 <= 2.4.39
cpe:2.3:a:apache:http_server:2.4.33:*:*:*:*:*:*:* http_server == None == 2.4.33
cpe:2.3:a:apache:http_server:2.4.34:*:*:*:*:*:*:* http_server == None == 2.4.34
cpe:2.3:a:apache:http_server:2.4.35:*:*:*:*:*:*:* http_server == None == 2.4.35
cpe:2.3:a:apache:http_server:2.4.37:*:*:*:*:*:*:* http_server == None == 2.4.37
cpe:2.3:a:apache:http_server:2.4.38:*:*:*:*:*:*:* http_server == None == 2.4.38

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
apache2 edge-main 2.4.41-r0 None fixed
apache2 3.22-main 2.4.41-r0 None fixed
apache2 3.21-main 2.4.41-r0 None fixed
apache2 3.20-main 2.4.41-r0 None fixed
apache2 3.19-main 2.4.41-r0 None fixed
apache2 3.18-main 2.4.41-r0 None fixed
apache2 3.17-main 2.4.41-r0 None fixed
apache2 3.12-main 2.4.41-r0 None fixed
apache2 3.11-main 2.4.41-r0 None fixed
apache2 3.10-main 2.4.41-r0 None fixed