kritik
CVE-2019-10082
httpd: read-after-free in h2 connection shutdown
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (orta), AlmaLinux (orta), Amazon (orta), Oracle (orta), Rocky Linux (orta), Ubuntu (düşük).
Açıklama
In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 1.0 | httpd | 2.4.41-1.ph1 |
| Photon OS 2.0 | httpd | 2.4.41-1.ph2 |
| Photon OS 3.0 | httpd | 2.4.41-1.ph3 |
| alma 8 | httpd:2.4::mod_md | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec |
| alpine 3.10 | apache2 | 2.4.41-r0 |
| alpine 3.11 | apache2 | 2.4.41-r0 |
| alpine 3.12 | apache2 | 2.4.41-r0 |
| alpine 3.13 | apache2 | 2.4.41-r0 |
| alpine 3.14 | apache2 | 2.4.41-r0 |
| alpine 3.15 | apache2 | 2.4.41-r0 |
| alpine 3.16 | apache2 | 2.4.41-r0 |
| alpine 3.17 | apache2 | 2.4.41-r0 |
39 kaynaktaki 82 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 1.0 | httpd | 2.4.41-1.ph1 |
| Photon OS 2.0 | httpd | 2.4.41-1.ph2 |
| Photon OS 3.0 | httpd | 2.4.41-1.ph3 |
| alma 8 | httpd:2.4::mod_md | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec |
| alpine 3.10 | apache2 | 2.4.41-r0 |
| alpine 3.11 | apache2 | 2.4.41-r0 |
| alpine 3.12 | apache2 | 2.4.41-r0 |
| alpine 3.13 | apache2 | 2.4.41-r0 |
| alpine 3.14 | apache2 | 2.4.41-r0 |
| alpine 3.15 | apache2 | 2.4.41-r0 |
| alpine 3.16 | apache2 | 2.4.41-r0 |
| alpine 3.17 | apache2 | 2.4.41-r0 |
| alpine 3.18 | apache2 | 2.4.41-r0 |
| alpine 3.19 | apache2 | 2.4.41-r0 |
| alpine 3.20 | apache2 | 2.4.41-r0 |
| alpine 3.21 | apache2 | 2.4.41-r0 |
| alpine 3.22 | apache2 | 2.4.41-r0 |
| alpine 3.23 | apache2 | 2.4.41-r0 |
| alpine 3.24 | apache2 | 2.4.41-r0 |
| alpine 3.7 | apache2 | 2.4.41-r0 |
| alpine 3.8 | apache2 | 2.4.41-r0 |
| alpine 3.9 | apache2 | 2.4.41-r0 |
| alpine edge | apache2 | 2.4.41-r0 |
| amazon linux 1 | httpd24 | 2.4.41-1.88.amzn1 |
| amazon linux 1 | httpd24-debuginfo | 2.4.41-1.88.amzn1 |
| amazon linux 1 | httpd24-devel | 2.4.41-1.88.amzn1 |
| amazon linux 1 | httpd24-manual | 2.4.41-1.88.amzn1 |
| amazon linux 1 | httpd24-tools | 2.4.41-1.88.amzn1 |
| amazon linux 1 | mod24_ldap | 2.4.41-1.88.amzn1 |
| amazon linux 1 | mod24_md | 2.4.41-1.88.amzn1 |
| amazon linux 1 | mod24_proxy_html | 1:2.4.41-1.88.amzn1 |
| amazon linux 1 | mod24_session | 2.4.41-1.88.amzn1 |
| amazon linux 1 | mod24_ssl | 1:2.4.41-1.88.amzn1 |
| debian 10 | apache2 | 2.4.38-3+deb10u1 |
| debian 11 | apache2 | 2.4.41-1 |
| debian 12 | apache2 | 2.4.41-1 |
| debian 13 | apache2 | 2.4.41-1 |
| debian 14 | apache2 | 2.4.41-1 |
| debian 9 | apache2 | 2.4.25-3+deb9u8 |
| echo | apache2 | 2.4.41-1 |
| Oracle Linux 8 | httpd | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | httpd-devel | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | httpd-filesystem | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | httpd-manual | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | httpd-tools | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | mod_http2 | 1.15.7-2.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | mod_ldap | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | mod_md | 1:2.0.8-8.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | mod_proxy_html | 1:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | mod_session | 2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Oracle Linux 8 | mod_ssl | 1:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| Red Hat | httpd | düzeltme belirtilmemiş |
| Red Hat | httpd-devel | düzeltme belirtilmemiş |
| Red Hat | httpd-manual | düzeltme belirtilmemiş |
| Red Hat | httpd-tools | düzeltme belirtilmemiş |
| Red Hat | httpd24 | düzeltme belirtilmemiş |
| Red Hat | httpd24-devel | düzeltme belirtilmemiş |
| Red Hat | httpd24-httpd | düzeltme belirtilmemiş |
| Red Hat | httpd24-httpd-devel | düzeltme belirtilmemiş |
| Red Hat | httpd24-httpd-manual | düzeltme belirtilmemiş |
| Red Hat | httpd24-httpd-tools | düzeltme belirtilmemiş |
| Red Hat | httpd24-manual | düzeltme belirtilmemiş |
| Red Hat | httpd24-mod_ldap | düzeltme belirtilmemiş |
| Red Hat | httpd24-mod_md | düzeltme belirtilmemiş |
| Red Hat | httpd24-mod_proxy_html | düzeltme belirtilmemiş |
| Red Hat | httpd24-mod_session | düzeltme belirtilmemiş |
| Red Hat | httpd24-mod_ssl | düzeltme belirtilmemiş |
| Red Hat | httpd24-tools | düzeltme belirtilmemiş |
| Red Hat | jbcs-httpd24 | düzeltme belirtilmemiş |
| Red Hat | jbcs-httpd24-runtime | düzeltme belirtilmemiş |
| Red Hat | mod_ldap | düzeltme belirtilmemiş |
| Red Hat | mod_ldap24 | düzeltme belirtilmemiş |
| Red Hat | mod_proxy24_html | düzeltme belirtilmemiş |
| Red Hat | mod_session24 | düzeltme belirtilmemiş |
| Red Hat | mod_ssl | düzeltme belirtilmemiş |
| Red Hat | mod_ssl24 | düzeltme belirtilmemiş |
| rocky 8 | httpd:2.4::mod_md | 1:2.0.8-8.module+el8.5.0+695+1fa8055e |
| root.io debian 12 | rootio-apache2 | 2.4.41-1 |
| root.io debian 13 | rootio-apache2 | 2.4.41-1 |
| ubuntu 18.04 | apache2 | 2.4.29-1ubuntu4.10 |
| ubuntu 18.04-ESM | apache2 | 2.4.29-1ubuntu4.10 |
| ubuntu 19.04 | apache2 | 2.4.38-2ubuntu2.2 |
Referanslar
- https://access.redhat.com/security/cve/CVE-2019-10082
- https://bugzilla.redhat.com/show_bug.cgi?id=1209162
- https://bugzilla.redhat.com/show_bug.cgi?id=1668497
- https://bugzilla.redhat.com/show_bug.cgi?id=1695030
- https://bugzilla.redhat.com/show_bug.cgi?id=1695042
- https://bugzilla.redhat.com/show_bug.cgi?id=1743956
- https://bugzilla.redhat.com/show_bug.cgi?id=1743959
- https://bugzilla.redhat.com/show_bug.cgi?id=1743966
49 referansın hepsi
- https://bugzilla.redhat.com/show_bug.cgi?id=1743974
- https://bugzilla.redhat.com/show_bug.cgi?id=1743996
- https://bugzilla.redhat.com/show_bug.cgi?id=1771847
- https://bugzilla.redhat.com/show_bug.cgi?id=1814236
- https://bugzilla.redhat.com/show_bug.cgi?id=1820761
- https://bugzilla.redhat.com/show_bug.cgi?id=1820772
- https://bugzilla.redhat.com/show_bug.cgi?id=1832844
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17189
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0196
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0197
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10081
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10082
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10092
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10097
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10098
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1927
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1934
- https://errata.almalinux.org/8/ALSA-2020-4751.html
- https://errata.rockylinux.org/RLSA-2020:4751
- https://httpd.apache.org/security/vulnerabilities_24.html
- https://linux.oracle.com/cve/CVE-2019-10082.html
- https://linux.oracle.com/errata/ELSA-2020-4751.html
- https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2019-10082
- https://ubuntu.com/security/notices/USN-4113-1
- https://www.cve.org/CVERecord?id=CVE-2019-10082
- https://www.openwall.com/lists/oss-security/2019/08/15/3
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html