CVE-2019-0211

KEV
Published: Apr 08, 2019 Last Modified: Ott 27, 2025
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 7,2
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,8901
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

416

Use After Free

Stable
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Availability Confidentiality
Potential Impacts:
Modify Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands
Applicable Platforms
Languages: C, C++, Memory-Unsafe
Likelihood of Exploit: High
View CWE Details
Exploit

Apache 2.4.17 < 2.4.38 - 'apache2ctl graceful' 'logrotate' …

Apache 2.4.17 < 2.4.38 - 'apache2ctl graceful' 'logrotate' Local Privilege Escalation

Author: cfreal Published:
View Exploit Code →
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.1_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1_s390x:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Route Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Route Manager
Version 8.2.0
cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Update Services For Sap Solutions
Version 8.8
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.4_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4_s390x:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 18.10
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Report Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Report Manager
Version 8.2.0
cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.2_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2_s390x:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 8.6
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Arm 64 Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Arm 64 Eus
Version 8.8_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.8_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian
Version 8.0_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Openshift Container Platform by Redhat

Product Information
Vendor Redhat
Product Openshift Container Platform
Version 3.11
cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Retail Xstore Point Of Service by Oracle

Product Information
Vendor Oracle
Product Retail Xstore Point Of Service
Version 7.0
cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Arm 64 Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Arm 64 Eus
Version 8.1_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.1_aarch64:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems
Version 8.0_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Enterprise Manager Ops Center by Oracle

Product Information
Vendor Oracle
Product Enterprise Manager Ops Center
Version 12.4.0
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Arm 64 Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Arm 64 Eus
Version 8.6_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Update Services For Sap Solutions
Version 8.1
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Http Server by Apache

Product Information
Vendor Apache
Product Http Server
Version Range Affected
From 2.4.17 (inclusive)
To 2.4.38 (inclusive)
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Route Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Route Manager
Version 8.1.0
cpe:2.3:a:oracle:communications_session_route_manager:8.1.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Oncommand Unified Manager by Netapp

Product Information
Vendor Netapp
Product Oncommand Unified Manager
Version -
cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Route Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Route Manager
Version 8.0.0
cpe:2.3:a:oracle:communications_session_route_manager:8.0.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Route Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Route Manager
Version 8.1.1
cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Arm 64 by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Arm 64
Version 8.0_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Leap by Opensuse

Product Information
Vendor Opensuse
Product Leap
Version 42.3
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Openshift Container Platform For Power by Redhat

Product Information
Vendor Redhat
Product Openshift Container Platform For Power
Version 3.11_ppc64le
cpe:2.3:a:redhat:openshift_container_platform_for_power:3.11_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.8
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Aus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Aus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.6
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Aus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Aus
Version 8.6
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 16.04
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Report Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Report Manager
Version 8.0.0
cpe:2.3:a:oracle:communications_session_report_manager:8.0.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Instantis Enterprisetrack by Oracle

Product Information
Vendor Oracle
Product Instantis Enterprisetrack
Version 17.3
cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 14.04
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Instantis Enterprisetrack by Oracle

Product Information
Vendor Oracle
Product Instantis Enterprisetrack
Version 17.1
cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.1
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.2_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 30
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Software Collections by Redhat

Product Information
Vendor Redhat
Product Software Collections
Version 1.0
cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Retail Xstore Point Of Service by Oracle

Product Information
Vendor Oracle
Product Retail Xstore Point Of Service
Version 7.1
cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Jboss Core Services by Redhat

Product Information
Vendor Redhat
Product Jboss Core Services
Version 1.0
cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Report Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Report Manager
Version 8.1.0
cpe:2.3:a:oracle:communications_session_report_manager:8.1.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Enterprise Manager Ops Center by Oracle

Product Information
Vendor Oracle
Product Enterprise Manager Ops Center
Version 12.3.3
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Arm 64 Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Arm 64 Eus
Version 8.4_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.4_aarch64:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 18.04
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Update Services For Sap Solutions
Version 8.0
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.6_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Instantis Enterprisetrack by Oracle

Product Information
Vendor Oracle
Product Instantis Enterprisetrack
Version 17.2
cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.4_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 29
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.6_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Communications Session Report Manager by Oracle

Product Information
Vendor Oracle
Product Communications Session Report Manager
Version 8.1.1
cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 28
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Http Server by Oracle

Product Information
Vendor Oracle
Product Http Server
Version 12.2.1.3.0
cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Aus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Aus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Update Services For Sap Solutions
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Arm 64 Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Arm 64 Eus
Version 8.2_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.2_aarch64:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 8.8
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Leap by Opensuse

Product Information
Vendor Opensuse
Product Leap
Version 15.0
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux
Version 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.1_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.8_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Update Services For Sap Solutions
Version 8.6
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019…
http://lists.opensuse.org/opensuse-security-announce/2019-0…
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html
http://lists.opensuse.org/opensuse-security-announce/2019-0…
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html
http://lists.opensuse.org/opensuse-security-announce/2019-0…
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
http://packetstormsecurity.com/files/152386/Apache-2.4.38-R…
http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escala…
http://packetstormsecurity.com/files/152415/Slackware-Secur…
http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-U…
http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apac…
http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privi…
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHSA-2019:0746
https://access.redhat.com/errata/RHSA-2019:0746
https://access.redhat.com/errata/RHSA-2019:0980
https://access.redhat.com/errata/RHSA-2019:0980
https://access.redhat.com/errata/RHSA-2019:1296
https://access.redhat.com/errata/RHSA-2019:1296
https://access.redhat.com/errata/RHSA-2019:1297
https://access.redhat.com/errata/RHSA-2019:1297
https://access.redhat.com/errata/RHSA-2019:1543
https://access.redhat.com/errata/RHSA-2019:1543
https://httpd.apache.org/security/vulnerabilities_24.html
https://httpd.apache.org/security/vulnerabilities_24.html
https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0…
https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293c…
https://lists.apache.org/thread.html/84a3714f0878781f6ed844…
https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e1…
https://lists.apache.org/thread.html/890507b85c30adf133216b…
https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885…
https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8…
https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06…
https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c…
https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b1…
https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff2…
https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea8…
https://lists.apache.org/thread.html/fd110f4ace2d8364c7d919…
https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85…
https://lists.apache.org/thread.html/r03ee478b3dda3e381fd61…
https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f6…
https://lists.apache.org/thread.html/r06f0d87ebb6d59ed83796…
https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfd…
https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7…
https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc…
https://lists.apache.org/thread.html/r76142b8c5119df2178be7…
https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec3…
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c80…
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f…
https://lists.apache.org/thread.html/rc998b18880df98bafaade…
https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444ada…
https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf0…
https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b…
https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe1…
https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbb…
https://lists.apache.org/thread.html/re3d27b6250aa8548b8845…
https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326ca…
https://lists.apache.org/thread.html/re473305a65b4db888e355…
https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcf…
https://lists.apache.org/thread.html/rf6449464fd8b7437704c5…
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://seclists.org/bugtraq/2019/Apr/16
https://seclists.org/bugtraq/2019/Apr/16
https://seclists.org/bugtraq/2019/Apr/5
https://seclists.org/bugtraq/2019/Apr/5
https://security.gentoo.org/glsa/201904-20
https://security.gentoo.org/glsa/201904-20
https://security.netapp.com/advisory/ntap-20190423-0001/
https://security.netapp.com/advisory/ntap-20190423-0001/
https://support.f5.com/csp/article/K32957101
https://support.f5.com/csp/article/K32957101
https://support.hpe.com/hpsc/doc/public/display?docLocale=e…
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hp…
https://usn.ubuntu.com/3937-1/
https://usn.ubuntu.com/3937-1/
https://www.debian.org/security/2019/dsa-4422
https://www.debian.org/security/2019/dsa-4422
https://www.exploit-db.com/exploits/46676/
https://www.exploit-db.com/exploits/46676/
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/technetwork/security-advisory/cpujul…
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://www.oracle.com/technetwork/security-advisory/cpuoct…
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
https://www.synology.com/security/advisory/Synology_SA_19_14
https://www.synology.com/security/advisory/Synology_SA_19_14
http://www.apache.org/dist/httpd/CHANGES_2.4.39
http://www.apache.org/dist/httpd/CHANGES_2.4.39
http://www.openwall.com/lists/oss-security/2019/04/02/3
http://www.openwall.com/lists/oss-security/2019/04/02/3
http://www.openwall.com/lists/oss-security/2019/07/26/7
http://www.openwall.com/lists/oss-security/2019/07/26/7
http://www.securityfocus.com/bid/107666
http://www.securityfocus.com/bid/107666
http://lists.opensuse.org/opensuse-security-announce/2019-0…
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html
http://lists.opensuse.org/opensuse-security-announce/2019-0…
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html
http://lists.opensuse.org/opensuse-security-announce/2019-0…
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
http://packetstormsecurity.com/files/152386/Apache-2.4.38-R…
http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escala…
http://packetstormsecurity.com/files/152415/Slackware-Secur…
http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-U…
http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apac…
http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privi…
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHSA-2019:0746
https://access.redhat.com/errata/RHSA-2019:0746
https://access.redhat.com/errata/RHSA-2019:0980
https://access.redhat.com/errata/RHSA-2019:0980
https://access.redhat.com/errata/RHSA-2019:1296
https://access.redhat.com/errata/RHSA-2019:1296
https://access.redhat.com/errata/RHSA-2019:1297
https://access.redhat.com/errata/RHSA-2019:1297
https://access.redhat.com/errata/RHSA-2019:1543
https://access.redhat.com/errata/RHSA-2019:1543
https://httpd.apache.org/security/vulnerabilities_24.html
https://httpd.apache.org/security/vulnerabilities_24.html
https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0…
https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293c…
https://lists.apache.org/thread.html/84a3714f0878781f6ed844…
https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e1…
https://lists.apache.org/thread.html/890507b85c30adf133216b…
https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885…
https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8…
https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06…
https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c…
https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b1…
https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff2…
https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea8…
https://lists.apache.org/thread.html/fd110f4ace2d8364c7d919…
https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85…
https://lists.apache.org/thread.html/r03ee478b3dda3e381fd61…
https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f6…
https://lists.apache.org/thread.html/r06f0d87ebb6d59ed83796…
https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfd…
https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7…
https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc…
https://lists.apache.org/thread.html/r76142b8c5119df2178be7…
https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec3…
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c80…
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f…
https://lists.apache.org/thread.html/rc998b18880df98bafaade…
https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444ada…
https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf0…
https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b…
https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe1…
https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbb…
https://lists.apache.org/thread.html/re3d27b6250aa8548b8845…
https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326ca…
https://lists.apache.org/thread.html/re473305a65b4db888e355…
https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcf…
https://lists.apache.org/thread.html/rf6449464fd8b7437704c5…
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://seclists.org/bugtraq/2019/Apr/16
https://seclists.org/bugtraq/2019/Apr/16
https://seclists.org/bugtraq/2019/Apr/5
https://seclists.org/bugtraq/2019/Apr/5
https://security.gentoo.org/glsa/201904-20
https://security.gentoo.org/glsa/201904-20
https://security.netapp.com/advisory/ntap-20190423-0001/
https://security.netapp.com/advisory/ntap-20190423-0001/
https://support.f5.com/csp/article/K32957101
https://support.f5.com/csp/article/K32957101
https://support.hpe.com/hpsc/doc/public/display?docLocale=e…
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hp…
https://usn.ubuntu.com/3937-1/
https://usn.ubuntu.com/3937-1/
https://www.debian.org/security/2019/dsa-4422
https://www.debian.org/security/2019/dsa-4422
https://www.exploit-db.com/exploits/46676/
https://www.exploit-db.com/exploits/46676/
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/technetwork/security-advisory/cpujul…
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://www.oracle.com/technetwork/security-advisory/cpuoct…
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
https://www.synology.com/security/advisory/Synology_SA_19_14
https://www.synology.com/security/advisory/Synology_SA_19_14
http://www.apache.org/dist/httpd/CHANGES_2.4.39
http://www.apache.org/dist/httpd/CHANGES_2.4.39
http://www.openwall.com/lists/oss-security/2019/04/02/3
http://www.openwall.com/lists/oss-security/2019/04/02/3
http://www.openwall.com/lists/oss-security/2019/07/26/7
http://www.openwall.com/lists/oss-security/2019/07/26/7
http://www.securityfocus.com/bid/107666
http://www.securityfocus.com/bid/107666