CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0190

A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.181

EPSS Ranking 94.8%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2019-0190

Apache » Http Server » Version: 2.4.37

cpe:2.3:a:apache:http_server:2.4.37
Openssl » Openssl » Version: 1.1.1

cpe:2.3:a:openssl:openssl:1.1.1
Openssl » Openssl » Version: 1.1.1a

cpe:2.3:a:openssl:openssl:1.1.1a
Openssl » Openssl » Version: 1.1.1b

cpe:2.3:a:openssl:openssl:1.1.1b
Openssl » Openssl » Version: 1.1.1c

cpe:2.3:a:openssl:openssl:1.1.1c
Openssl » Openssl » Version: 1.1.1d

cpe:2.3:a:openssl:openssl:1.1.1d
Openssl » Openssl » Version: 1.1.1e

cpe:2.3:a:openssl:openssl:1.1.1e
Openssl » Openssl » Version: 1.1.1f

cpe:2.3:a:openssl:openssl:1.1.1f
Openssl » Openssl » Version: 1.1.1g

cpe:2.3:a:openssl:openssl:1.1.1g
Openssl » Openssl » Version: 1.1.1h

cpe:2.3:a:openssl:openssl:1.1.1h
Openssl » Openssl » Version: 1.1.1i

cpe:2.3:a:openssl:openssl:1.1.1i
Openssl » Openssl » Version: 1.1.1j

cpe:2.3:a:openssl:openssl:1.1.1j
Openssl » Openssl » Version: 1.1.1k

cpe:2.3:a:openssl:openssl:1.1.1k
Openssl » Openssl » Version: 1.1.1l

cpe:2.3:a:openssl:openssl:1.1.1l
Openssl » Openssl » Version: 1.1.1m

cpe:2.3:a:openssl:openssl:1.1.1m
Openssl » Openssl » Version: 1.1.1n

cpe:2.3:a:openssl:openssl:1.1.1n
Openssl » Openssl » Version: 1.1.1o

cpe:2.3:a:openssl:openssl:1.1.1o
Openssl » Openssl » Version: 1.1.1p

cpe:2.3:a:openssl:openssl:1.1.1p
Openssl » Openssl » Version: 1.1.1q

cpe:2.3:a:openssl:openssl:1.1.1q
Openssl » Openssl » Version: 1.1.1r

cpe:2.3:a:openssl:openssl:1.1.1r
Openssl » Openssl » Version: 1.1.1s

cpe:2.3:a:openssl:openssl:1.1.1s
Openssl » Openssl » Version: 1.1.1t

cpe:2.3:a:openssl:openssl:1.1.1t
Openssl » Openssl » Version: 1.1.1u

cpe:2.3:a:openssl:openssl:1.1.1u
Openssl » Openssl » Version: 1.1.1v

cpe:2.3:a:openssl:openssl:1.1.1v
Openssl » Openssl » Version: 1.1.1w

cpe:2.3:a:openssl:openssl:1.1.1w
Openssl » Openssl » Version: 1.1.1x

cpe:2.3:a:openssl:openssl:1.1.1x
Openssl » Openssl » Version: 3.0.0

cpe:2.3:a:openssl:openssl:3.0.0
Openssl » Openssl » Version: 3.0.1

cpe:2.3:a:openssl:openssl:3.0.1
Openssl » Openssl » Version: 3.0.10

cpe:2.3:a:openssl:openssl:3.0.10
Openssl » Openssl » Version: 3.0.11

cpe:2.3:a:openssl:openssl:3.0.11
Openssl » Openssl » Version: 3.0.12

cpe:2.3:a:openssl:openssl:3.0.12
Openssl » Openssl » Version: 3.0.13

cpe:2.3:a:openssl:openssl:3.0.13
Openssl » Openssl » Version: 3.0.2

cpe:2.3:a:openssl:openssl:3.0.2
Openssl » Openssl » Version: 3.0.3

cpe:2.3:a:openssl:openssl:3.0.3
Openssl » Openssl » Version: 3.0.4

cpe:2.3:a:openssl:openssl:3.0.4
Openssl » Openssl » Version: 3.0.5

cpe:2.3:a:openssl:openssl:3.0.5
Openssl » Openssl » Version: 3.0.6

cpe:2.3:a:openssl:openssl:3.0.6
Openssl » Openssl » Version: 3.0.7

cpe:2.3:a:openssl:openssl:3.0.7
Openssl » Openssl » Version: 3.0.8

cpe:2.3:a:openssl:openssl:3.0.8
Openssl » Openssl » Version: 3.0.9

cpe:2.3:a:openssl:openssl:3.0.9
Openssl » Openssl » Version: 3.1.0

cpe:2.3:a:openssl:openssl:3.1.0
Openssl » Openssl » Version: 3.1.1

cpe:2.3:a:openssl:openssl:3.1.1
Openssl » Openssl » Version: 3.1.2

cpe:2.3:a:openssl:openssl:3.1.2
Openssl » Openssl » Version: 3.1.3

cpe:2.3:a:openssl:openssl:3.1.3
Openssl » Openssl » Version: 3.1.4

cpe:2.3:a:openssl:openssl:3.1.4
Openssl » Openssl » Version: 3.1.5

cpe:2.3:a:openssl:openssl:3.1.5
Openssl » Openssl » Version: 3.2.0

cpe:2.3:a:openssl:openssl:3.2.0
Openssl » Openssl » Version: 3.2.1

cpe:2.3:a:openssl:openssl:3.2.1
Openssl » Openssl » Version: a.00.09.07l

cpe:2.3:a:openssl:openssl:a.00.09.07l
Oracle » Enterprise Manager Ops Center » Version: 12.3.3

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3
Oracle » Hospitality Guest Access » Version: 4.2.0

cpe:2.3:a:oracle:hospitality_guest_access:4.2.0
Oracle » Hospitality Guest Access » Version: 4.2.1

cpe:2.3:a:oracle:hospitality_guest_access:4.2.1
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Oracle » Retail Xstore Point Of Service » Version: 7.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0190

Products

Pricing

Contact Us