● CVE — High
CVE-2019-0211
Vendordebian, fedoraproject, canonical, redhat, netappProductdebian linux, fedora, ubuntu linux, enterprise linux, enterprise linux eus, enterprise linux for arm 64, enterprise linux for arm 64 eus, enterprise linux for ibm z systems, enterprise linux for ibm z systems eus, enterprise linux for power little endian, enterprise linux for power little endian eus, enterprise linux server aus, enterprise linux server tus, enterprise linux update services for sap solutions, openshift container platform, oncommand unified manager, leap, http server, enterprise manager ops center, jboss core services, communications session report manager, communications session route manager, software collections, openshift container platform for powerDiscoveredApr 8, 2019UpdatedOct 27, 2025
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.