CVE-2019-0197

🗓️ 11 Jun 2019 21:35:52Reported by apacheType

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38, allowing a misconfiguration and crash when handling HTTP/2 upgrade request

Reporter	Title	Published	Views	Family All 107
IBM Security Bulletins	Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2019-0196;CVE-2019-0197;CVE-2019-0211;CVE-2019-0215;CVE-2019-0217; and CVE-2019-0220)	23 Jul 201917:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities CVE-2019-0196, CVE-2019-0197, and CVE-2019-0220 in the IBM i HTTP Server affect IBM i.	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera Web Applications (Faspex, Console) are affected by Apache Vulnerabilities (CVE-2019-0196, CVE-2019-0197, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220)	7 Feb 202002:12	–	ibm
Tenable Nessus	Apache HTTP Server < 2.4.39 Multiple Vulnerabilities	8 Apr 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2019-1189)	18 Apr 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2019-1189)	10 Apr 201900:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0017: httpd:2.4 (ALINUX3-SA-2022:0017)	14 May 202500:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.39 Multiple Vulnerabilities	2 Apr 201900:00	–	nessus
Tenable Nessus	CentOS 8 : httpd:2.4 (CESA-2020:4751)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : httpd (EulerOS-SA-2020-1289)	23 Mar 202000:00	–	nessus

[
  {
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.34 to 2.4.38"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
securityfocus	www.securityfocus.com/bid/107665
access	www.access.redhat.com/errata/RHSA-2019:3932
openwall	www.openwall.com/lists/oss-security/2019/04/02/2
lists	www.lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
lists	www.lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
support	www.support.hpe.com/hpsc/doc/public/display
lists	www.lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E
httpd	www.httpd.apache.org/security/vulnerabilities_24.html

06 Jun 2021 10:10Current

5.6Medium risk

Vulners AI Score5.6

EPSS0.02193