UpHeron
All vulnerabilities

Servers and applications

CVE-2019-0196

A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.

Severity
Medium 5.3
Published
11 Jun 2019
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.4.17 up to 2.4.38

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-0196
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-0196