CLEANSTART-2026-MZ37947 bug exists in the way mod_ssl handled client renegotiations

🗓️ 09 Oct 2026 00:49:55Reported by GoogleType

osv-cleanstart🔗 osv.dev👁 5 Views

Bug in apache2 mod_ssl handling client renegotiations.

Reporter	Title	Published	Views	Family All 58
ALT Linux	Security fix for the ALT Linux 8 package apache2 version 1:2.4.38-alt1	28 Jan 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1	25 Jan 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.38-alt1	25 Jan 201900:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2019-0190; CVE-2018-17189; CVE-2018-17199)	28 Mar 201907:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities CVE-2018-17199, CVE-2018-17189, and CVE-2019-0190 in the IBM i HTTP Server affect IBM i.	20 Feb 201922:00	–	ibm
Amazon	Important: httpd24	6 Mar 201900:00	–	amazon
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2019-1166)	12 Mar 201900:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0017: httpd:2.4 (ALINUX3-SA-2022:0017)	14 May 202500:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.38 Multiple Vulnerabilities	24 Jan 201900:00	–	nessus
Tenable Nessus	FreeBSD : Apache -- vulnerability (eb888ce5-1f19-11e9-be05-4c72b94353b5)	24 Jan 201900:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MZ37947.json
osv	www.osv.dev/vulnerability/CVE-2019-0190
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-0190

09 Oct 2026 01:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.59055

apache2 mod_ssl client renegotiations