CVE-2019-0211

Advisory lineage Upstream: 0 Downstream: 11
Analyzed
Published: 08 Apr 2019, 21:31
Last modified:21 Oct 2025, 23:45

Vulnerability Summary

Overall Risk (default)
high
59/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
89.57% CRITICAL
90% probability +0.12%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
3 found
Dark Web
Not detected

Timeline

08 Apr 2019, 21:31
Published
Vulnerability first disclosed
03 Nov 2021, 00:00
Added to CISA KEV
Apache HTTP Server Privilege Escalation Vulnerability
03 May 2022, 00:00
CISA Remediation Due
Apply updates per vendor instructions.
21 Oct 2025, 23:45
Last Modified
Vulnerability information updated

Description

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 89.57%• Percentile: 100%

Techniques & Countermeasures

  • CWE-416•Use After Free

    The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected Systems

  • apache•apache_http_server

    2.4.17 to 2.4.38

  • Unknown•HTTP Server

    ≥ 2.4.17, ≤ 2.4.38

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 18.10

  • debian•debian_linux

    9.0

  • fedoraproject•fedora

    28 | 29 | 30

  • netapp•oncommand_unified_manager

    na

  • opensuse•leap

    15.0 | 42.3

  • oracle•communications_session_report_manager

    8.0.0 | 8.1.0 | 8.1.1 | 8.2.0

  • oracle•communications_session_route_manager

    8.0.0 | 8.1.0 | 8.1.1 | 8.2.0

  • oracle•enterprise_manager_ops_center

    12.3.3 | 12.4.0

  • oracle•http_server

    12.2.1.3.0

  • oracle•instantis_enterprisetrack

    17.1 | 17.2 | 17.3

  • oracle•retail_xstore_point_of_service

    7.0 | 7.1

  • redhat•enterprise_linux

    8.0

  • redhat•enterprise_linux_eus

    8.1 | 8.2 | 8.4 | 8.6 | 8.8

  • redhat•enterprise_linux_for_arm_64

    8.0_aarch64

  • redhat•enterprise_linux_for_arm_64_eus

    8.1_aarch64 | 8.2_aarch64 | 8.4_aarch64 | 8.6_aarch64 | 8.8_aarch64

  • redhat•enterprise_linux_for_ibm_z_systems

    8.0_s390x

  • redhat•enterprise_linux_for_ibm_z_systems_eus

    8.1_s390x | 8.2_s390x | 8.4_s390x | 8.6_s390x | 8.8_s390x

  • redhat•enterprise_linux_for_power_little_endian

    8.0_ppc64le

  • redhat•enterprise_linux_for_power_little_endian_eus

    8.1_ppc64le | 8.2_ppc64le | 8.4_ppc64le | 8.6_ppc64le | 8.8_ppc64le

  • redhat•enterprise_linux_server_aus

    8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_server_tus

    8.2 | 8.4 | 8.6 | 8.8

  • redhat•enterprise_linux_update_services_for_sap_solutions

    8.0 | 8.1 | 8.4 | 8.6 | 8.8

  • redhat•jboss_core_services

    1.0

  • redhat•openshift_container_platform

    3.11

  • redhat•openshift_container_platform_for_power

    3.11_ppc64le

  • redhat•software_collections

    1.0

References (52)