Strix
26.1K

CVE-2019-10097

HIGHCVSS 7.2/10EPSS 52.87%

Last modified

CVE-2019-10097 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.. EPSS estimates a 52.87% chance of exploitation in the next 30 days.

Description

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.

Metrics

CVSS 3.1
7.2/10

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
52.87%

98.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ApacheHttp Server2.4.33
ApacheHttp Server2.4.34
ApacheHttp Server2.4.35
ApacheHttp Server2.4.37
ApacheHttp Server2.4.38
OracleCommunications Element Manager8.0.0
OracleCommunications Element Manager8.1.0
OracleCommunications Element Manager8.1.1
OracleCommunications Element Manager8.2.0
OracleCommunications Session Report Manager8.1.1
OracleCommunications Session Report Manager8.2.0
OracleCommunications Session Report Manager8.2.1
OracleCommunications Session Route Manager8.1.1
OracleCommunications Session Route Manager8.2.0
OracleCommunications Session Route Manager8.2.1
OracleEnterprise Manager Ops Center12.3.3
OracleEnterprise Manager Ops Center12.4.0
OracleHttp Server12.2.1.4.0
OracleInstantis Enterprisetrack>= 17.1, <= 17.3
OracleRetail Xstore Point Of Service7.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-10097?
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
How severe is CVE-2019-10097?
CVE-2019-10097 has a CVSS score of 7.2/10 (HIGH severity). The EPSS model estimates a 52.87% probability of exploitation in the next 30 days.
How do I fix CVE-2019-10097?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-10097?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST