CVE-2019-10097

A vulnerability was discovered in Apache httpd, in mod_remoteip. A trusted proxy using the “PROXY” protocol could send specially crafted headers that can cause httpd to experience a stack buffer overflow or NULL pointer dereference, leading to a crash or other potential consequences. This issue could only be exploited by configured trusted intermediate proxy servers. HTTP clients such as browsers could not exploit the vulnerability.

Mitigation

This flaw is only exploitable if RemoteIP* directives are used in Apache httpd configuration. The following command can be used to search for possible vulnerable configurations:

grep -R '^\s*RemoteIP' /etc/httpd/  

See <https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html&gt;