CVE-2019-0215 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-0215 Interim 1 30 2025-11-05T03:16:09Z current 2021-05-30T14:21:04Z 2025-11-05T03:16:09Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-0215 In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Liberty Linux 8 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Server Applications 15 SUSE Studio Onsite 1.3 apache2 apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils apache2-worker httpd-2.4.37-11.module+el8.0.0+2969+90015743 httpd-devel-2.4.37-11.module+el8.0.0+2969+90015743 httpd-filesystem-2.4.37-11.module+el8.0.0+2969+90015743 httpd-manual-2.4.37-11.module+el8.0.0+2969+90015743 httpd-tools-2.4.37-11.module+el8.0.0+2969+90015743 mod_http2-1.11.3-2.module+el8.0.0+2969+90015743 mod_ldap-2.4.37-11.module+el8.0.0+2969+90015743 mod_md-2.4.37-11.module+el8.0.0+2969+90015743 mod_proxy_html-2.4.37-11.module+el8.0.0+2969+90015743 mod_session-2.4.37-11.module+el8.0.0+2969+90015743 mod_ssl-2.4.37-11.module+el8.0.0+2969+90015743 httpd-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 httpd-devel-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 httpd-filesystem-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 httpd-manual-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 httpd-tools-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 mod_http2-1.11.3-2.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 mod_ldap-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 mod_md-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 mod_proxy_html-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 mod_session-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 mod_ssl-2.4.37-11.module+el8.0.0+2969+90015743 as a component of SUSE Liberty Linux 8 apache2 as a component of SLES for SAP Applications 11 SP3 apache2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 apache2 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-doc as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-prefork as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-utils as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-worker as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata apache2 as a component of SUSE Linux Enterprise Server 11 SP3 LTSS apache2 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata apache2 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-doc as a component of SUSE Linux Enterprise Server 12 SP3 apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP3 apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP3 apache2-utils as a component of SUSE Linux Enterprise Server 12 SP3 apache2-worker as a component of SUSE Linux Enterprise Server 12 SP3 apache2 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-doc as a component of SUSE Linux Enterprise Server 12 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP4 apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP4 apache2-utils as a component of SUSE Linux Enterprise Server 12 SP4 apache2-worker as a component of SUSE Linux Enterprise Server 12 SP4 apache2 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 12-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 12-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 12-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 12-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 12-LTSS apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-example-pages as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-prefork as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-utils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-worker as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-prefork as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-utils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-worker as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-doc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-prefork as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-utils as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-worker as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 apache2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 apache2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 apache2-devel as a component of SUSE Studio Onsite 1.3 apache2 as a component of SUSE Studio Onsite 1.3 In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions. CVE-2019-0215 SUSE Liberty Linux 8:httpd-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:httpd-devel-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:httpd-filesystem-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:httpd-manual-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:httpd-tools-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:mod_http2-1.11.3-2.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:mod_ldap-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:mod_md-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:mod_proxy_html-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:mod_session-2.4.37-11.module+el8.0.0+2969+90015743 SUSE Liberty Linux 8:mod_ssl-2.4.37-11.module+el8.0.0+2969+90015743 SLES for SAP Applications 11 SP3:apache2 SUSE Linux Enterprise High Performance Computing 12 SP4:apache2 SUSE Linux Enterprise Module for Server Applications 15:apache2 SUSE Linux Enterprise Module for Server Applications 15:apache2-devel SUSE Linux Enterprise Module for Server Applications 15:apache2-doc SUSE Linux Enterprise Module for Server Applications 15:apache2-prefork SUSE Linux Enterprise Module for Server Applications 15:apache2-utils SUSE Linux Enterprise Module for Server Applications 15:apache2-worker SUSE Linux Enterprise Server 11 SP1 for Teradata:apache2 SUSE Linux Enterprise Server 11 SP3 LTSS:apache2 SUSE Linux Enterprise Server 11 SP3 for Teradata:apache2 SUSE Linux Enterprise Server 11 SP4-LTSS:apache2 SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-doc SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-example-pages SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-prefork SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-utils SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-worker SUSE Linux Enterprise Server 12 SP1-LTSS:apache2 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-doc SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-example-pages SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-prefork SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-utils SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-worker SUSE Linux Enterprise Server 12 SP2-LTSS:apache2 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-doc SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-example-pages SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-prefork SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-utils SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-worker SUSE Linux Enterprise Server 12 SP3:apache2 SUSE Linux Enterprise Server 12 SP3:apache2-doc SUSE Linux Enterprise Server 12 SP3:apache2-example-pages SUSE Linux Enterprise Server 12 SP3:apache2-prefork SUSE Linux Enterprise Server 12 SP3:apache2-utils SUSE Linux Enterprise Server 12 SP3:apache2-worker SUSE Linux Enterprise Server 12 SP4:apache2 SUSE Linux Enterprise Server 12 SP4:apache2-doc SUSE Linux Enterprise Server 12 SP4:apache2-example-pages SUSE Linux Enterprise Server 12 SP4:apache2-prefork SUSE Linux Enterprise Server 12 SP4:apache2-utils SUSE Linux Enterprise Server 12 SP4:apache2-worker SUSE Linux Enterprise Server 12-LTSS:apache2 SUSE Linux Enterprise Server 12-LTSS:apache2-doc SUSE Linux Enterprise Server 12-LTSS:apache2-example-pages SUSE Linux Enterprise Server 12-LTSS:apache2-prefork SUSE Linux Enterprise Server 12-LTSS:apache2-utils SUSE Linux Enterprise Server 12-LTSS:apache2-worker SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-doc SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-example-pages SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-prefork SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-utils SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-worker SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-example-pages SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-prefork SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-utils SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-worker SUSE Linux Enterprise Server for SAP Applications 12:apache2 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-devel SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-doc SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-example-pages SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-prefork SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-utils SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-worker SUSE Linux Enterprise Software Development Kit 12 SP3:apache2 SUSE Linux Enterprise Software Development Kit 12 SP3:apache2-devel SUSE Linux Enterprise Software Development Kit 12 SP4:apache2 SUSE Linux Enterprise Software Development Kit 12 SP4:apache2-devel SUSE Studio Onsite 1.3:apache2 SUSE Studio Onsite 1.3:apache2-devel important 6 AV:N/AC:M/Au:S/C:P/I:P/A:P 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H