CVE-2019-0211 | AttackerKB

Description

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

7.8 High

Impact Score:

5.9

Exploitability Score:

1.8

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector (AV):

Local

Attack Complexity (AC):

Low

Privileges Required (PR):

Low

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

High

Integrity (I):

High

Availability (A):

High

Vendors

Products

Exploited in the Wild

Reported by:

gwillcox-r7 indicated source as Government or Industry Alert (https://www.cisa.gov/known-exploited-vulnerabilities-catalog)

Reported: June 14, 2022 9:33pm UTC (2 years ago)

References

Canonical

CVE-2019-0211 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0211)

BID-107666 (http://www.securityfocus.com/bid/107666)

Advisory

[oss-security] 20190401 CVE-2019-0211: Apache HTTP Server privilege escalation from modules' scripts (http://www.openwall.com/lists/oss-security/2019/04/02/3)

20190403 [SECURITY] [DSA 4422-1] apache2 security update (https://seclists.org/bugtraq/2019/Apr/5)

https://www.synology.com/security/advisory/Synology_SA_19_14

USN-3937-1 (https://usn.ubuntu.com/3937-1/)

FEDORA-2019-cf7695b470 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/)

DSA-4422 (https://www.debian.org/security/2019/dsa-4422)

[httpd-users] 20190406 [users@httpd] CVE-2019-0211/0215/0217 (https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06e0e90098ebf7aa@%3Cusers.httpd.apache.org%3E)

FEDORA-2019-119b14075a (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/)

20190407 [slackware-security] httpd (SSA:2019-096-01) (https://seclists.org/bugtraq/2019/Apr/16)

EXPLOIT-DB-46676 (https://www.exploit-db.com/exploits/46676/)

[community-dev] 20190411 CVE-2019-0211 applicable to versions 2.2.x? (https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885acfc671c04694e@%3Cdev.community.apache.org%3E)

[community-dev] 20190411 Re: CVE-2019-0211 applicable to versions 2.2.x? (https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28@%3Cdev.community.apache.org%3E)

RHSA-2019:0746 (https://access.redhat.com/errata/RHSA-2019:0746)

openSUSE-SU-2019:1190 (http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html)

[community-dev] 20190411 RE: CVE-2019-0211 applicable to versions 2.2.x? (https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea80e69400a45509e@%3Cdev.community.apache.org%3E)

https://support.f5.com/csp/article/K32957101

openSUSE-SU-2019:1209 (http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html)

GLSA-201904-20 (https://security.gentoo.org/glsa/201904-20)

https://security.netapp.com/advisory/ntap-20190423-0001/

openSUSE-SU-2019:1258 (http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html)

RHSA-2019:0980 (https://access.redhat.com/errata/RHSA-2019:0980)

RHBA-2019:0959 (https://access.redhat.com/errata/RHBA-2019:0959)

FEDORA-2019-a4ed7400f4 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/)

RHSA-2019:1297 (https://access.redhat.com/errata/RHSA-2019:1297)

RHSA-2019:1296 (https://access.redhat.com/errata/RHSA-2019:1296)

[httpd-cvs] 20190611 svn commit: r1861068 - /httpd/site/trunk/content/security/vulnerabilities-httpd.xml (https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E)

RHSA-2019:1543 (https://access.redhat.com/errata/RHSA-2019:1543)

[oss-security] 20190726 Re: Statistics for distros lists updated for 2019Q2 (http://www.openwall.com/lists/oss-security/2019/07/26/7)

[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us

[announce] 20200131 Apache Software Foundation Security Report: 2019 (https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E)

[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ (https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20210330 svn commit: r1073143 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/ (https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20210330 svn commit: r1073139 [12/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ (https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20210330 svn commit: r1888194 [12/13] - /httpd/site/trunk/content/security/json/ (https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538@%3Ccvs.httpd.apache.org%3E)

[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ (https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E)

Miscellaneous

http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html

https://httpd.apache.org/security/vulnerabilities_24.html

http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html

http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html

http://www.apache.org/dist/httpd/CHANGES_2.4.39

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

https://www.oracle.com/security-alerts/cpuapr2020.html

Rapid7

Technical Analysis