NetSight
IP …
high7.2

CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafte…

Impact

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.

Affected products

VendorProductAffected versions
ApacheHttp Server
Versions 2.4.33, 2.4.34, 2.4.35, 2.4.37, 2.4.38
OracleCommunications Element Manager
Versions 8.0.0, 8.1.0, 8.1.1, 8.2.0
OracleCommunications Session Report Manager
Versions 8.1.1, 8.2.0, 8.2.1
OracleCommunications Session Route Manager
Versions 8.1.1, 8.2.0, 8.2.1
OracleEnterprise Manager Ops Center
Versions 12.3.3, 12.4.0
OracleHttp Server
Version 12.2.1.4.0
OracleInstantis Enterprisetrack
from 17.1 through 17.3
OracleRetail Xstore Point Of Service
Version 7.1

Weakness classification

CWE-476CWE-787

References