oracle enterprise-manager-ops-center CVE-2019-0190 in Oracle and Apache Products
Published on January 30, 2019

product logo product logo
A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.

Vendor Advisory NVD


Products Associated with CVE-2019-0190

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-0190 are published in these products:

Oracle Enterprise Manager Ops Center
 
Oracle Hospitality Guest Access
 
Oracle Instantis Enterprisetrack
 
Oracle Retail Xstore Point Of Service
 
Apache HTTP Server
 

Affected Versions

Apache Software Foundation Apache HTTP Server Version Apache HTTP Server 2.4.37 is affected by CVE-2019-0190

Exploit Probability

EPSS
18.92%
Percentile
95.18%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.