CVE-2019-0215

In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2019-0215 apache2 Corrigé dans: 2.4.39-r0
Debian DEBIAN-CVE-2019-0215 apache2 Corrigé dans: 2.4.38-3

Références

advisory openwall.com
advisory securityfocus.com
advisory access.redhat.com
advisory httpd.apache.org
advisory security.netapp.com
advisory support.f5.com
advisory oracle.com
advisory oracle.com
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.apache.org
web lists.fedoraproject.org
web lists.fedoraproject.org
web lists.fedoraproject.org
web oracle.com
web oracle.com