[3.6] apache2: Multiple vulnerabilities (CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220)| ID: oval:org.secpod.oval:def:1801365 | Date: (C)2019-04-09 (M)2024-01-29 |
| Class: PATCH | Family: unix |
CVE-2019-0196: mod_ read-after-free on a string compare¶ Using fuzzed network input, the request handling could be made to access freed memory in string comparision when determining the method of a request and thus process the request incorrectly. Versions Affected:¶ 2.4.17 to 2.4.38 Fixed In Version:¶ Apache 2.4.39
| Platform: |
| Alpine Linux 3.6 |
