PatchTheCVEgroonga-httpd vulnerabilities and fixes
Recent CVEs affecting groonga-httpd, with upgrade or downgrade steps. 1 tracked.
Also searched as: groonga httpd.
groonga-httpd has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-05-02. Highest priority: CVE-2019-11675 (score 33/100).
- CVE-2019-11675 HIGH 7.0 DOWNGRADE The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which
FAQ
How do I fix groonga-httpd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is groonga-httpd being exploited right now?
None of the tracked groonga-httpd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which groonga-httpd CVE should I patch first?
CVE-2019-11675 currently ranks highest (33/100): The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which.