Kaspersky ID:
KLA12366
Date de la détection:
08/14/2019
Mis à jour:
01/28/2026

Description

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface.

Below is a complete list of vulnerabilities:

  1. Memory corruption vulnerability in mod_http2 can be exploited to cause denial of service.
  2. Stack buffer overflow vulnerability in mod_remoteip can be exploited via special crafted PROXY header to cause denial of service.
  3. Cross-site scripting (XSS) vulnerability in mod_proxy error page can be exploited to perform cross-site scripting attack.
  4. Use after free vulnerability in mod_http2 can be exploited to cause denial of service.
  5. Denial of service vulnerability in mod_http2 can be exploited to cause denial of service.
  6. Security UI vulnerability in mod_rewrite can be exploited to spoof user interface.

Fiches de renseignement originales

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

Liste CVE

  • CVE-2019-10092
    high
  • CVE-2019-10081
    critical
  • CVE-2019-10097
    high
  • CVE-2019-10082
    critical
  • CVE-2019-9517
    critical
  • CVE-2019-10098
    high

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com

Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !
Kaspersky IT Security Calculator:
Calculez le profil de sécurité de votre entreprise
Apprendre encore plus
Kaspersky!
Votre vie en ligne mérite une protection complète!
Apprendre encore plus
Do you want to save your changes?
Your message has been sent successfully.