Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Oracle HTTP Server Use After Free Vulnerability - CVE-2019-0211 - Vulnerability Database
Oracle HTTP Server

Oracle HTTP Server Use After Free Vulnerability - CVE-2019-0211

High
Reference: CVE-2019-0211
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-0211
Title: Oracle HTTP Server Use After Free Vulnerability
Overview:

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38 with MPM event worker or prefork code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.