CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.117

EPSS Ranking 93.3%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.0

References

Products affected by CVE-2019-10097

Apache » Http Server » Version: 2.4.33

cpe:2.3:a:apache:http_server:2.4.33
Apache » Http Server » Version: 2.4.34

cpe:2.3:a:apache:http_server:2.4.34
Apache » Http Server » Version: 2.4.35

cpe:2.3:a:apache:http_server:2.4.35
Apache » Http Server » Version: 2.4.37

cpe:2.3:a:apache:http_server:2.4.37
Apache » Http Server » Version: 2.4.38

cpe:2.3:a:apache:http_server:2.4.38
Oracle » Communications Element Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_element_manager:8.0.0
Oracle » Communications Element Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_element_manager:8.1.0
Oracle » Communications Element Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_element_manager:8.1.1
Oracle » Communications Element Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_element_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1
Oracle » Communications Session Route Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_route_manager:8.1.1
Oracle » Communications Session Route Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0
Oracle » Communications Session Route Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.1
Oracle » Enterprise Manager Ops Center » Version: 12.3.3

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3
Oracle » Enterprise Manager Ops Center » Version: 12.4.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0
Oracle » Http Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:http_server:12.2.1.4.0
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10097

Products

Pricing

Contact Us