CVE-2019-10097

EPSS 23.55% · P96 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-10097

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Apache HTTP Server 代码问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Apache HTTP Server是美国阿帕奇软件（Apache Software）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。 Apache HTTP Server 2.4.32版本至2.4.39版本中存在代码问题漏洞。远程攻击者通过发送特制PROXY标头利用该漏洞导致拒绝服务。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Apache HTTP Server	2.4.32 to 2.4.39	-

II. Public POCs for CVE-2019-10097

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2019-10097

请登录查看更多情报信息。

https://www.oracle.com/security-alerts/cpujul2020.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2020.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpuoct2020.htmlx_refsource_MISC
Apache HTTP Server 2.4 vulnerabilities - The Apache HTTP Server Projectx_refsource_MISC
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlx_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:4126vendor-advisoryx_refsource_REDHAT
https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
svn commit: r1073143 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/-Apache Mail Archivesmailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
svn commit: r1075470 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html-Apache Mail Archivesmailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2019-10097

Same Patch Batch · n/a · 2019-09-26 · 58 CVEs total

CVE-2019-14273		SilverStripe assets 安全漏洞
CVE-2019-0203		Apache Subversion 输入验证错误漏洞
CVE-2019-16667		pfSense 跨站请求伪造漏洞
CVE-2019-16914		pfSense 跨站脚本漏洞
CVE-2019-16915		pfSense 输入验证错误漏洞
CVE-2019-12562		DNN 跨站脚本漏洞
CVE-2019-16532		YzmCMS 安全漏洞
CVE-2019-10092		Apache HTTP Server 跨站脚本漏洞
CVE-2019-12617		SilverStripe 安全漏洞
CVE-2019-14272		SilverStripe asset-admin 跨站脚本漏洞
CVE-2019-16894		inoERP SQL代码问题漏洞
CVE-2019-16904		TeamPass 跨站脚本漏洞
CVE-2019-16903		Platinum UPnP SDK 路径遍历漏洞
CVE-2015-9441		WordPress bookmarkify插件跨站请求伪造漏洞
CVE-2015-9442		WordPress avenirsoft-directdownload插件跨站请求伪造漏洞
CVE-2015-9443		WordPress accurate-form-data-real-time-form-validation插件跨站请求伪造漏洞
CVE-2015-9444		WordPress altos-connect插件跨站脚本漏洞
CVE-2015-9445		WordPress unite-gallery-lite插件跨站请求伪造漏洞
CVE-2015-9446		WordPress unite-gallery-lite插件SQL注入漏洞
CVE-2015-9447		WordPress unite-gallery-lite插件跨站请求伪造漏洞

Showing top 20 of 58 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Apache HTTP Server

Same vendor: n/a

V. Comments for CVE-2019-10097

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2019-10097

I. Basic Information for CVE-2019-10097

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2019-10097

III. Intelligence Information for CVE-2019-10097

Same Patch Batch · n/a · 2019-09-26 · 58 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2019-10097

Leave a comment