Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2019-10097

Quick assessment

Affected

n/a Apache HTTP Server

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Apache HTTP Server是美国阿帕奇软件（Apache Software）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。 Apache HTTP Server 2.4.32版本至2.4.39版本中存在代码问题漏洞。远程攻击者通过发送特制PROXY标头利用该漏洞导致拒绝服务。

AI Predicted 5.0 Difficulty: Moderate EPSS 52.87% · P99 Updated Feb 21, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-10097

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Apache HTTP Server 代码问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Apache HTTP Server	2.4.32 to 2.4.39	-

II. Public POCs for CVE-2019-10097

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2019-10097

请登录查看更多情报信息。

Vendor Advisories for CVE-2019-10097 (6)

https://www.oracle.com/security-alerts/cpujul2020.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2020.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpuoct2020.html x_refsource_MISC
Apache HTTP Server 2.4 vulnerabilities - The Apache HTTP Server Project x_refsource_MISC
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:4126 vendor-advisory x_refsource_REDHAT

Mailing List Discussions for CVE-2019-10097 (11)

https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
🔗 svn commit: r1073143 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/-Apache Mail Archives Read full article mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
🔗 svn commit: r1075470 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html-Apache Mail Archives Read full article mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST

https://www.cve.org/CVERecord?id=CVE-2019-10097

Same Patch Batch · n/a · 2019-09-26 · 58 CVEs total

CVE-2019-14273		SilverStripe assets 安全漏洞
CVE-2019-0203		Apache Subversion 输入验证错误漏洞
CVE-2019-16667		pfSense 跨站请求伪造漏洞
CVE-2019-16914		pfSense 跨站脚本漏洞
CVE-2019-16915		pfSense 输入验证错误漏洞
CVE-2019-12562		DNN 跨站脚本漏洞
CVE-2019-16532		YzmCMS 安全漏洞
CVE-2019-10092		Apache HTTP Server 跨站脚本漏洞
CVE-2019-12617		SilverStripe 安全漏洞
CVE-2019-14272		SilverStripe asset-admin 跨站脚本漏洞
CVE-2019-16894		inoERP SQL代码问题漏洞
CVE-2019-16904		TeamPass 跨站脚本漏洞
CVE-2019-16903		Platinum UPnP SDK 路径遍历漏洞
CVE-2015-9441		WordPress bookmarkify插件跨站请求伪造漏洞
CVE-2015-9442		WordPress avenirsoft-directdownload插件跨站请求伪造漏洞
CVE-2015-9443		WordPress accurate-form-data-real-time-form-validation插件跨站请求伪造漏洞
CVE-2015-9444		WordPress altos-connect插件跨站脚本漏洞
CVE-2015-9445		WordPress unite-gallery-lite插件跨站请求伪造漏洞
CVE-2015-9446		WordPress unite-gallery-lite插件SQL注入漏洞
CVE-2015-9447		WordPress unite-gallery-lite插件跨站请求伪造漏洞

Showing top 20 of 58 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Apache HTTP Server

Same vendor: n/a

V. Comments for CVE-2019-10097

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2019-10097

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2019-10097

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2019-10097

III. Intelligence Information for CVE-2019-10097

Vendor Advisories for CVE-2019-10097 (6)

Mailing List Discussions for CVE-2019-10097 (11)

Same Patch Batch · n/a · 2019-09-26 · 58 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2019-10097

Leave a comment