CVE-2019-10082

🗓️ 07 Apr 2020 04:56:13Reported by redhat.comType

A read-after-free vulnerability in Apache httpd mod_http2 allows a specially crafted http/2 client session to read previously freed memory, potentially leading to a crash

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM i HTTP Server affect IBM i.	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect Rational Build Forge (CVE-2019-9517, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098)	30 Sep 201912:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses "Apache httpd 2.4" which is vulnerable to multiple CVEs	21 Mar 202506:40	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera Web Applications (Faspex, Console, Shares) are affected by Apache Vulnerabilities (CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098), )	7 Feb 202002:02	–	ibm
Amazon	Medium: httpd24	18 Oct 201900:00	–	amazon
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2019-1311) (Internal Data Buffering)	28 Oct 201900:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0017: httpd:2.4 (ALINUX3-SA-2022:0017)	14 May 202500:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.41 Multiple Vulnerabilities	20 Aug 201900:00	–	nessus
Tenable Nessus	CentOS 8 : httpd:2.4 (CESA-2020:4751)	1 Feb 202100:00	–	nessus
Tenable Nessus	Debian DSA-4509-1 : apache2 - security update (Internal Data Buffering)	27 Aug 201900:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10082
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Jan 2024 18:50Current

0.8Low risk

Vulners AI Score0.8

CVSS 26.4

CVSS 3.19.1

CVSS 36.5

EPSS0.4206