Live › vulnerability › CVE-2019-0211
Go to dashboardApache HTTP Server with the event, worker or prefork MPM lets code running in a less-privileged child process or thread (including scripts run by an in-process interpreter) manipulate the scoreboard to gain the privileges of the parent process, usually root. An attacker who already runs code inside a child worker can escalate to root on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apache HTTP Server | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the Apache HTTP Server update per vendor instructions; the CISA entry gives no fixed version in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
This page as .md · .json · in your agent: get_signal("CVE-2019-0211")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.