PT-2019-3892 · Apache+7 · Apache Http Server+7

Publicado 2019-04-03 · Atualizado 2024-06-15 · CVE-2019-10097

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.32 through 2.4.39

Description The issue is related to a stack buffer overflow or NULL pointer deference in the mod remoteip module of the Apache HTTP Server. This can be triggered by a specially crafted PROXY header from a trusted intermediary proxy server using the "PROXY" protocol. The vulnerability can only be exploited by a trusted proxy, not by untrusted HTTP clients.

Recommendations For Apache HTTP Server versions 2.4.32 through 2.4.39, consider disabling the mod remoteip module until a patch is available to prevent potential exploitation. Restrict access to the PROXY protocol to minimize the risk of exploitation. Avoid using the PROXY header in the affected module until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

NULL Pointer Dereference

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-476

CWE-787

Identificadores relacionados

ALSA-2020:4751

ALT-PU-2019-1580

BDU:2019-04285

CESA-2020_4751

CVE-2019-10097

DSA-4509-1

DSA-4509-2

MGASA-2019-0407

OPENSUSE-SU-2019:2051-1

OPENSUSE-SU-2019_2051-1

OPENSUSE-SU-2024:10623-1

RHSA-2019:4126

RHSA-2020:1337

RHSA-2020:4751

RHSA-2020_4751

RLSA-2020:4751

SUSE-SU-2019:2237-1

USN-4113-1

USN-4113-2

Produtos afetados

Alt Linux

Almalinux

Apache Http Server

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Referências · 186

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd · Exploit
• 🔥 https://github.com/ozkanbilge/Apache-Exploit-2019 · Exploit
• 🔥 https://github.com/motikan2010/CVE-2019-10092_Docker · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0197 · Nota de Segurança
• https://lists.opensuse.org/opensuse-updates/2019-09/msg00012.html · Nota
• http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10098 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0215 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/2PR3ITGMIPGWWX4VYKKICQKSZVW5QUW3/#2PR3ITGMIPGWWX4VYKKICQKSZVW5QUW3 · Nota
• https://vulners.com/cve/CVE-2020-1927 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10097 · Nota
• https://packages.debian.org/src:subversion · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1743966 · Nota
• https://ubuntu.com/security/CVE-2019-10092 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4113-1 · Aviso do Fabricante