CVE-2019-0220
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'),...
Original description
The description as published by the source.
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2019-0220 apache2 Fixed in: 2.4.39-r0
- Debian DEBIAN-CVE-2019-0220 apache2 Fixed in: 2.4.38-3
References
- advisory openwall.com
- advisory securityfocus.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory httpd.apache.org
- advisory lists.debian.org
- advisory seclists.org
- advisory security.netapp.com
- advisory support.f5.com
- advisory usn.ubuntu.com
- advisory debian.org
- advisory oracle.com
- advisory oracle.com
- patch lists.opensuse.org
- patch lists.opensuse.org
- patch lists.opensuse.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web support.hpe.com
- web oracle.com
- web oracle.com
- web oracle.com