CVE Listesine Dön
CVE-2019-0211 CISA KEV · Aktif Sömürülüyor

httpd: privilege escalation from modules scripts

CVSS Skor

8.8

EPSS İhtimal

%65.0

Risk Skoru

11.4

Yayın

7 yıl önce

Overview (Genel Bakış)Public Exploits (1)Newsroom (Haberler)Vulnerability Timeline
Yama yalnızca bazı ürün veya sürümlerde mevcut

Kanıt listesindeki ürün ve sürüm eşleşmesini kontrol edin; bazı varyantlar hâlâ etkileniyor olabilir.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2019-0211 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A flaw was found in Apache where code executing in a less-privileged child process or thread could execute arbitrary code with the privilege of the parent process (usually root). An attacker having access to run arbitrary scripts on the web server (PHP, CGI etc) could use this flaw to run code on the web server with root privileges.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2019-0211 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1Red Hatred_hat_jboss_enterprise_web_server_2:jbcs-httpd24 İncele
2Red Hatred_hat_jboss_enterprise_web_server_2:jbcs-httpd24-runtime İncele
3Red Hatred_hat_jboss_enterprise_web_server_2:jbcs-httpd24.src İncele
4Red Hat6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-40.jbcs.el6.i686 İncele
5Red Hat6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-40.jbcs.el6.src İncele
6Red Hat6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-40.jbcs.el6.x86_64 İncele
7Red Hat6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-40.jbcs.el6.i686 İncele
8Red Hat6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-40.jbcs.el6.x86_64 İncele
9Red Hat6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-40.jbcs.el6.i686 İncele
10Red Hat6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-40.jbcs.el6.x86_64 İncele
11Red Hat6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-40.jbcs.el6.noarch İncele
12Red Hat6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-40.jbcs.el6.i686 İncele
13Red Hat6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-40.jbcs.el6.x86_64 İncele
14Red Hat6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-40.jbcs.el6.i686 İncele
15Red Hat6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-40.jbcs.el6.x86_64 İncele
16Red Hat6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-40.jbcs.el6.i686 İncele
17Red Hat6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-40.jbcs.el6.x86_64 İncele
18Red Hat6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-40.jbcs.el6.i686 İncele
19Red Hat6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-40.jbcs.el6.x86_64 İncele
20Red Hat6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-40.jbcs.el6.i686 İncele
21Red Hat6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-40.jbcs.el6.x86_64 İncele
22Red Hat6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-40.jbcs.el6.i686 İncele
23Red Hat6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-40.jbcs.el6.x86_64 İncele
24Red Hat6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-15.jbcs.el6.i686 İncele
25Red Hat6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-15.jbcs.el6.src İncele
26Red Hat6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-15.jbcs.el6.x86_64 İncele
27Red Hat6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-15.jbcs.el6.i686 İncele
28Red Hat6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-15.jbcs.el6.x86_64 İncele
29Red Hat6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-15.jbcs.el6.i686 İncele
30Red Hat6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-15.jbcs.el6.x86_64 İncele
31Red Hat6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-15.jbcs.el6.i686 İncele
32Red Hat6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-15.jbcs.el6.x86_64 İncele
33Red Hat6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-15.jbcs.el6.i686 İncele
34Red Hat6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-15.jbcs.el6.x86_64 İncele
35Red Hat6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-15.jbcs.el6.i686 İncele
36Red Hat6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-15.jbcs.el6.x86_64 İncele
37Red Hat6Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.1.src İncele
38Red Hat6Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.1.x86_64 İncele
39Red Hat6Server-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el6.1.x86_64 İncele
40Red Hat6Server-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el6.1.x86_64 İncele
41Red Hat6Server-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el6.1.noarch İncele
42Red Hat6Server-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el6.1.x86_64 İncele
43Red Hat6Server-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el6.1.x86_64 İncele
44Red Hat6Server-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el6.1.x86_64 İncele
45Red Hat6Server-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el6.1.x86_64 İncele
46Red Hat6Server-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el6.1.x86_64 İncele
47Red Hat6Workstation-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.1.src İncele
48Red Hat6Workstation-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.1.x86_64 İncele
49Red Hat6Workstation-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el6.1.x86_64 İncele
50Red Hat6Workstation-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el6.1.x86_64 İncele
51Red Hat6Workstation-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el6.1.noarch İncele
52Red Hat6Workstation-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el6.1.x86_64 İncele
53Red Hat6Workstation-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el6.1.x86_64 İncele
54Red Hat6Workstation-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el6.1.x86_64 İncele
55Red Hat6Workstation-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el6.1.x86_64 İncele
56Red Hat6Workstation-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el6.1.x86_64 İncele
57Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.1.aarch64 İncele
58Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.1.ppc64le İncele
59Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.1.s390x İncele
60Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.1.src İncele
61Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.aarch64 İncele
62Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.ppc64le İncele
63Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.s390x İncele
64Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.1.aarch64 İncele
65Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.1.ppc64le İncele
66Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.1.s390x İncele
67Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el7.1.noarch İncele
68Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.1.aarch64 İncele
69Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.1.ppc64le İncele
70Red Hat7Server-Alt-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.1.s390x İncele
71Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.aarch64 İncele
72Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.ppc64le İncele
73Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.s390x İncele
74Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.src İncele
75Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.aarch64 İncele
76Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.ppc64le İncele
77Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.s390x İncele
78Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.1.aarch64 İncele
79Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.1.ppc64le İncele
80Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.1.s390x İncele
81Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.1.aarch64 İncele
82Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.1.ppc64le İncele
83Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.1.s390x İncele
84Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.aarch64 İncele
85Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.ppc64le İncele
86Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.s390x İncele
87Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.1.aarch64 İncele
88Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.1.ppc64le İncele
89Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.1.s390x İncele
90Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.1.aarch64 İncele
91Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.1.ppc64le İncele
92Red Hat7Server-Alt-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.1.s390x İncele
93Red Hat7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-40.jbcs.el7.src İncele
94Red Hat7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-40.jbcs.el7.x86_64 İncele
95Red Hat7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-40.jbcs.el7.x86_64 İncele
96Red Hat7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-40.jbcs.el7.x86_64 İncele
97Red Hat7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-40.jbcs.el7.noarch İncele
98Red Hat7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-40.jbcs.el7.x86_64 İncele
99Red Hat7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-40.jbcs.el7.x86_64 İncele
100Red Hat7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-40.jbcs.el7.x86_64 İncele
101Red Hat7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-40.jbcs.el7.x86_64 İncele
102Red Hat7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-40.jbcs.el7.x86_64 İncele
103Red Hat7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-40.jbcs.el7.x86_64 İncele
104Red Hat7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-15.jbcs.el7.src İncele
105Red Hat7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-15.jbcs.el7.x86_64 İncele
106Red Hat7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-15.jbcs.el7.x86_64 İncele
107Red Hat7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-15.jbcs.el7.x86_64 İncele
108Red Hat7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-15.jbcs.el7.x86_64 İncele
109Red Hat7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-15.jbcs.el7.x86_64 İncele
110Red Hat7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-15.jbcs.el7.x86_64 İncele
111Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.1.ppc64le İncele
112Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.1.s390x İncele
113Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.1.src İncele
114Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.1.x86_64 İncele
115Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.ppc64le İncele
116Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.s390x İncele
117Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.x86_64 İncele
118Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.ppc64le İncele
119Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.s390x İncele
120Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.x86_64 İncele
121Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-manual-0:2.4.34-7.el7.1.noarch İncele
122Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.ppc64le İncele
123Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.s390x İncele
124Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.x86_64 İncele
125Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.ppc64le İncele
126Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.s390x İncele
127Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.src İncele
128Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.x86_64 İncele
129Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.ppc64le İncele
130Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.s390x İncele
131Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.x86_64 İncele
132Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ldap-0:2.4.34-7.el7.1.ppc64le İncele
133Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ldap-0:2.4.34-7.el7.1.s390x İncele
134Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ldap-0:2.4.34-7.el7.1.x86_64 İncele
135Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_md-0:2.4.34-7.el7.1.ppc64le İncele
136Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_md-0:2.4.34-7.el7.1.s390x İncele
137Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_md-0:2.4.34-7.el7.1.x86_64 İncele
138Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.ppc64le İncele
139Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.s390x İncele
140Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.x86_64 İncele
141Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_session-0:2.4.34-7.el7.1.ppc64le İncele
142Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_session-0:2.4.34-7.el7.1.s390x İncele
143Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_session-0:2.4.34-7.el7.1.x86_64 İncele
144Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ssl-1:2.4.34-7.el7.1.ppc64le İncele
145Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ssl-1:2.4.34-7.el7.1.s390x İncele
146Red Hat7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ssl-1:2.4.34-7.el7.1.x86_64 İncele
147Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.1.ppc64le İncele
148Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.1.s390x İncele
149Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.1.src İncele
150Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.1.x86_64 İncele
151Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.ppc64le İncele
152Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.s390x İncele
153Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.x86_64 İncele
154Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.ppc64le İncele
155Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.s390x İncele
156Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.x86_64 İncele
157Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-manual-0:2.4.34-7.el7.1.noarch İncele
158Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.ppc64le İncele
159Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.s390x İncele
160Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.x86_64 İncele
161Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.ppc64le İncele
162Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.s390x İncele
163Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.src İncele
164Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.x86_64 İncele
165Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.ppc64le İncele
166Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.s390x İncele
167Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_auth_mellon-debuginfo-0:0.13.1-2.el7.1.x86_64 İncele
168Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ldap-0:2.4.34-7.el7.1.ppc64le İncele
169Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ldap-0:2.4.34-7.el7.1.s390x İncele
170Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ldap-0:2.4.34-7.el7.1.x86_64 İncele
171Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_md-0:2.4.34-7.el7.1.ppc64le İncele
172Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_md-0:2.4.34-7.el7.1.s390x İncele
173Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_md-0:2.4.34-7.el7.1.x86_64 İncele
174Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.ppc64le İncele
175Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.s390x İncele
176Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.1.x86_64 İncele
177Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_session-0:2.4.34-7.el7.1.ppc64le İncele
178Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_session-0:2.4.34-7.el7.1.s390x İncele
179Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_session-0:2.4.34-7.el7.1.x86_64 İncele
180Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ssl-1:2.4.34-7.el7.1.ppc64le İncele
181Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ssl-1:2.4.34-7.el7.1.s390x İncele
182Red Hat7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ssl-1:2.4.34-7.el7.1.x86_64 İncele
183Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.1.ppc64le İncele
184Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.1.s390x İncele
185Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.1.src İncele
186Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.1.x86_64 İncele
187Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.ppc64le İncele
188Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.s390x İncele
189Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.1.x86_64 İncele
190Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.ppc64le İncele
191Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.s390x İncele
192Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-devel-0:2.4.34-7.el7.1.x86_64 İncele
193Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-manual-0:2.4.34-7.el7.1.noarch İncele
194Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.ppc64le İncele
195Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.s390x İncele
196Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-tools-0:2.4.34-7.el7.1.x86_64 İncele
197Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.ppc64le İncele
198Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.s390x İncele
199Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.src İncele
200Red Hat7Server-RHSCL-3.2-7.6.Z:httpd24-mod_auth_mellon-0:0.13.1-2.el7.1.x86_64 İncele
Total Affected Vendor: 1|Products: 200

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Etkilenmiyor

Red Hat VEX kaydına göre bu ürün etkilenmiyor.

Red Hat düzeltmeleri

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically. The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Core Services installation (including all applications and configuration files).

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.8cvss_v3HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HRed Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Kısmi yama

8 düzeltme kanıtı bulundu; en az 3 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

Kaynağı aç
redhat

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Core Services installation (including all applications and configuration files).

Kaynağı aç
redhat

Out of support scope

reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

Kaynağı aç
reference

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Core Services installation (including all applications and configuration files).

Kaynağı aç
canonical

Apply updates per vendor instructions.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

CVE-2019-0211 için veritabanında 1 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2019-0211 is associated with the following CWEs:

CWE-250: Common Weakness Enumeration Entry CWE-250

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2019-0211 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimYerel erişim
YetkiDüşük
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisoryRHBZ#1694980vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2019-0211vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2019-0211vendor-advisoryhttp://www.apache.org/dist/httpd/CHANGES_2.4vendor-advisoryhttps://httpd.apache.org/security/vulnerabilities_24.html#CVE-2019-0211vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.patch

CVSS Vektör Radar Grafiği

8.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack VectorLocal (Yerel)
Attack ComplexityLow (Düşük)
Privileges RequiredLow (Düşük Yetki)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)High (Yüksek)

Kısmi yama

8 düzeltme kanıtı bulundu; en az 3 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

Üreticiyi takip et

RH
Red Hat logo
Red Hat

Zafiyet Türü (CWE & CAPEC)

CWE-250

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-0211"