Wind River Support Network

HomeDefectsLIN9-8625
Fixed

LIN9-8625 : Security Advisory - apache - CVE-2019-0196

Created: Jun 12, 2019    Updated: Aug 15, 2019
Resolved Date: Jul 21, 2019
Found In Version: 9.0.0.1
Fix Version: 9.0.0.22
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-0196 User=admin}

CVEs


Live chat
Online