CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-04-08
Apache HTTP Server Local Privilege Escalation Vulnerability Analysis and Mitigation Guide (CVE-2019-0211)
[Affected Scope] Apache HTTP Server versions 2.4.17 to 2.4.38 running on Unix-like operating systems with event, worker, or prefork MPMs enabled
[Impact] A low-privileged child process or in-process scripting engine (e.g., PHP, CGI) can manipulate the shared scoreboard memory to execute arbitrary code with root privileges of the parent process
[Mitigation] Immediately upgrade Apache HTTP Server to the latest stable version (2.4.39 or higher) and restrict script execution privileges