CVE-2019-0190 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-0190 Interim 1 29 2025-11-05T03:16:14Z current 2021-05-30T14:21:00Z 2025-11-05T03:16:14Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-0190 A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Server Applications 15 SUSE Studio Onsite 1.3 apache2 apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils apache2-worker apache2 as a component of SLES for SAP Applications 11 SP3 apache2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 apache2 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-doc as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-prefork as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-utils as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-worker as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata apache2 as a component of SUSE Linux Enterprise Server 11 SP3 LTSS apache2 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata apache2 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-doc as a component of SUSE Linux Enterprise Server 12 SP3 apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP3 apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP3 apache2-utils as a component of SUSE Linux Enterprise Server 12 SP3 apache2-worker as a component of SUSE Linux Enterprise Server 12 SP3 apache2 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-doc as a component of SUSE Linux Enterprise Server 12 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP4 apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP4 apache2-utils as a component of SUSE Linux Enterprise Server 12 SP4 apache2-worker as a component of SUSE Linux Enterprise Server 12 SP4 apache2 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 12-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 12-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 12-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 12-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 12-LTSS apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-example-pages as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-prefork as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-utils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-worker as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-prefork as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-utils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-worker as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-doc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-prefork as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-utils as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-worker as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 apache2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 apache2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 apache2-devel as a component of SUSE Studio Onsite 1.3 apache2 as a component of SUSE Studio Onsite 1.3 A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts. CVE-2019-0190 SLES for SAP Applications 11 SP3:apache2 SUSE Linux Enterprise High Performance Computing 12 SP4:apache2 SUSE Linux Enterprise Module for Server Applications 15:apache2 SUSE Linux Enterprise Module for Server Applications 15:apache2-devel SUSE Linux Enterprise Module for Server Applications 15:apache2-doc SUSE Linux Enterprise Module for Server Applications 15:apache2-prefork SUSE Linux Enterprise Module for Server Applications 15:apache2-utils SUSE Linux Enterprise Module for Server Applications 15:apache2-worker SUSE Linux Enterprise Server 11 SP1 for Teradata:apache2 SUSE Linux Enterprise Server 11 SP3 LTSS:apache2 SUSE Linux Enterprise Server 11 SP3 for Teradata:apache2 SUSE Linux Enterprise Server 11 SP4-LTSS:apache2 SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-doc SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-example-pages SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-prefork SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-utils SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-worker SUSE Linux Enterprise Server 12 SP2-LTSS:apache2 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-doc SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-example-pages SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-prefork SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-utils SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-worker SUSE Linux Enterprise Server 12 SP3:apache2 SUSE Linux Enterprise Server 12 SP3:apache2-doc SUSE Linux Enterprise Server 12 SP3:apache2-example-pages SUSE Linux Enterprise Server 12 SP3:apache2-prefork SUSE Linux Enterprise Server 12 SP3:apache2-utils SUSE Linux Enterprise Server 12 SP3:apache2-worker SUSE Linux Enterprise Server 12 SP4:apache2 SUSE Linux Enterprise Server 12 SP4:apache2-doc SUSE Linux Enterprise Server 12 SP4:apache2-example-pages SUSE Linux Enterprise Server 12 SP4:apache2-prefork SUSE Linux Enterprise Server 12 SP4:apache2-utils SUSE Linux Enterprise Server 12 SP4:apache2-worker SUSE Linux Enterprise Server 12-LTSS:apache2 SUSE Linux Enterprise Server 12-LTSS:apache2-doc SUSE Linux Enterprise Server 12-LTSS:apache2-example-pages SUSE Linux Enterprise Server 12-LTSS:apache2-prefork SUSE Linux Enterprise Server 12-LTSS:apache2-utils SUSE Linux Enterprise Server 12-LTSS:apache2-worker SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-doc SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-example-pages SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-prefork SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-utils SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-worker SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-example-pages SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-prefork SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-utils SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-worker SUSE Linux Enterprise Server for SAP Applications 12:apache2 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-devel SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-doc SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-example-pages SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-prefork SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-utils SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-worker SUSE Linux Enterprise Software Development Kit 12 SP3:apache2 SUSE Linux Enterprise Software Development Kit 12 SP3:apache2-devel SUSE Linux Enterprise Software Development Kit 12 SP4:apache2 SUSE Linux Enterprise Software Development Kit 12 SP4:apache2-devel SUSE Studio Onsite 1.3:apache2 SUSE Studio Onsite 1.3:apache2-devel important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H