Description

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.

Remediation

References

CVE-2019-10097

Related Vulnerabilities

WordPress Plugin Leaky Paywall Cross-Site Scripting (4.16.5)

CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20716)

WordPress Plugin WP Travel-Best Travel Booking, Tour Management Engine Cross-Site Request Forgery (4.4.6)

WordPress Plugin One User Avatar-User Profile Picture Unspecified Vulnerability (2.3.8)

Oracle JRE CVE-2013-5842 Vulnerability (CVE-2013-5842)

Severity

High

Classification

CVE-2019-10097 CWE-787 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities