PT-2019-1764 · Apache+5 · Apache Http Server+5

Published 2019-04-01 · Updated 2026-02-07 · CVE-2019-0211

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.17 through 2.4.38

Description The vulnerability is related to insufficient access control in the MPM module of the Apache HTTP Server, allowing an attacker to execute arbitrary code with root privileges by manipulating the scoreboard. This issue affects Unix systems and can be exploited by executing code in less-privileged child processes or threads, including scripts executed by an in-process scripting interpreter. Non-Unix systems are not affected.

Recommendations For Apache HTTP Server versions 2.4.17 through 2.4.38, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the scoreboard to minimize the risk of exploitation. Additionally, restrict the execution of scripts in less-privileged child processes or threads to reduce the attack surface.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

CWE-250

Related Identifiers

ALT-PU-2019-1580

BDU:2019-01404

CESA-2019_0980

CVE-2019-0211

DSA-4422-1

ELSA-2019-0980

OPENSUSE-SU-2019:1209-1

OPENSUSE-SU-2019_1190-1

OPENSUSE-SU-2019_1209-1

OPENSUSE-SU-2019_1258-1

RHSA-2019:0746

RHSA-2019:0980

RHSA-2019:1297

RHSA-2019_0980

SUSE-SU-2019:0873-1

SUSE-SU-2019:0878-1

SUSE-SU-2019_0873-1

SUSE-SU-2019_0878-1

USN-3937-1

Affected Products

Alt Linux

Apache Http Server

Centos

Red Hat

Suse

Ubuntu

References · 119

• 🔥 https://github.com/cfreal/exploits · Exploit
• 🔥 https://github.com/ozkanbilge/Apache-Exploit-2019 · Exploit
• 🔥 http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html · Exploit
• 🔥 https://exploit-db.com/exploits/46676 · Exploit
• 🔥 http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html · Exploit
• 🔥 https://cfreal.github.io/carpe-diem-cve-2019-0211-apache-local-root.html · Exploit
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0746 · Vendor Advisory
• https://access.redhat.com/errata/RHBA-2019:0959 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-0211 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0211 · Security Note
• https://oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html · Patch
• https://security.gentoo.org/glsa/201904-20 · Vendor Advisory
• https://seclists.org/bugtraq/2019/Apr/16 · Patch