CVE-2019-0211
Type:
Permissions, Privileges, and Access Control
Severity:
High
Publication date:
04/08/2019
Last modified:
06/11/2019
Description
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
Impact
Access Vector: Local
Access Complexity: Low
Authentication: Not required to exploit
Impact Type: Total commitment on system integrity + Total commitment on system confidentiality + Total commitment on system availability
Vulnerable software and versions
- cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
To consult the complete list of products and versions see this page
References to Advisories, Solutions, and Tools
- openSUSE-SU-2019:1190 (Source: SUSE)
- openSUSE-SU-2019:1209 (Source: SUSE)
- openSUSE-SU-2019:1258 (Source: SUSE)
- http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html (Source: MISC)
- http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html (Source: MISC)
- http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html (Source: MISC)
- http://www.apache.org/dist/httpd/CHANGES_2.4.39 (Source: MISC)
- [oss-security] 20190401 CVE-2019-0211: Apache HTTP Server privilege escalation from modules' scripts (Source: MLIST)
- [oss-security] 20190726 Re: Statistics for distros lists updated for 2019Q2 (Source: MLIST)
- 107666 (Source: BID)
- RHBA-2019:0959 (Source: REDHAT)
- RHSA-2019:0746 (Source: REDHAT)
- RHSA-2019:0980 (Source: REDHAT)
- RHSA-2019:1296 (Source: REDHAT)
- RHSA-2019:1297 (Source: REDHAT)
- RHSA-2019:1543 (Source: REDHAT)
- https://httpd.apache.org/security/vulnerabilities_24.html (Source: MISC)
- [httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (Source: MLIST)
- [httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (Source: MLIST)
- [community-dev] 20190411 CVE-2019-0211 applicable to versions 2.2.x? (Source: MLIST)
- [httpd-users] 20190406 [users@httpd] CVE-2019-0211/0215/0217 (Source: MLIST)
- [community-dev] 20190411 Re: CVE-2019-0211 applicable to versions 2.2.x? (Source: MLIST)
- [community-dev] 20190411 RE: CVE-2019-0211 applicable to versions 2.2.x? (Source: MLIST)
- [httpd-cvs] 20190611 svn commit: r1861068 - /httpd/site/trunk/content/security/vulnerabilities-httpd.xml (Source: MLIST)
- FEDORA-2019-a4ed7400f4 (Source: FEDORA)
- FEDORA-2019-119b14075a (Source: FEDORA)
- FEDORA-2019-cf7695b470 (Source: FEDORA)
- 20190407 [slackware-security] httpd (SSA:2019-096-01) (Source: BUGTRAQ)
- 20190403 [SECURITY] [DSA 4422-1] apache2 security update (Source: BUGTRAQ)
- GLSA-201904-20 (Source: GENTOO)
- https://security.netapp.com/advisory/ntap-20190423-0001/ (Source: CONFIRM)
- https://support.f5.com/csp/article/K32957101 (Source: CONFIRM)
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us (Source: CONFIRM)
- USN-3937-1 (Source: UBUNTU)
- DSA-4422 (Source: DEBIAN)
- 46676 (Source: EXPLOIT-DB)
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html (Source: MISC)
- https://www.synology.com/security/advisory/Synology_SA_19_14 (Source: CONFIRM)