CVE-2019-0211VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2019-0211: Apache HTTP Server Privilege Escalation Vulnerability

Affects Apache HTTP ServerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 65.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-0211 (opens in a new tab)

Description

CVE-2019-0211 is a privilege escalation vulnerability in Apache HTTP Server affecting the MPM event, worker, and prefork modes. It allows code executing in less-privileged child processes or threads, including scripts run by in-process scripting interpreters, to execute with the privileges of the parent process, which is typically root. This vulnerability has been exploited in the wild.

Summary

Apache HTTP Server versions running with MPM event, worker, or prefork allow a privilege escalation attack where code executing in child processes or threads with lower privileges can manipulate the scoreboard to execute code with the parent process's privileges, usually root. This flaw enables attackers to gain elevated privileges on the affected system. The vulnerability is tracked as CVE-2019-0211 and has been observed exploited in the wild.

Impact

Successful exploitation results in privilege escalation to the parent process's privilege level, typically root, allowing attackers to execute arbitrary code with elevated privileges on the affected server. This can lead to full system compromise.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official advisories are provided here, users should consult Apache's official security advisories to apply any available fixes or mitigations. Until patched, restricting access and minimizing exposure of vulnerable Apache servers is recommended.

Weaknesses

CWE-416Use After Free (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:41:55 UTC

Weaknesses

References

Related threats