Apache HTTP suffers from a local root privilege escalation vulnerability due to an out-of-bounds array access leading to an arbitrary function call. The vulnerability is triggered when Apache gracefully restarts ( apache2ctl graceful) In standard Linux configurations, the logrotate utility runs this command once a day, at 6:25AM, in order to reset log file handles. In MPM prefork, the main server process, running as root, manages a pool of single-threaded, low-privilege ( www-data ) worker processes.”]
Source: https://cfreal.github.io/carpe-diem-cve-2019-0211-apache-local-root.html