CVE-2017-15710

CWE-787 — Out-of-bounds Write13 documents8 sources
Severity
7.5HIGH
EPSS
8.0%
top 7.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apache Software Foundation Apache Http ServerApache Http ServerCanonical Ubuntu Linux+2 more
Timeline
PublishedMar 26
Latest updateMay 13

Description

In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶Debianapache2< 2.4.33-1+3
▶Ubuntuapache2< 2.4.7-1ubuntu4.20+2
▶NVDapache/http_server19 versions+18
▶CVEListV5apache_software_foundation/apache_http_server2.0.23 to 2.0.65, 2.2.0 to 2.2.34, 2.4.0 to 2.4.29+2

Also affects: Debian Linux 7.0, 8.0, 9.0, Ubuntu Linux 12.04, 14.04, 16.04, 17.10, 18.04, Enterprise Linux 6.0, 7.0, 7.4, 7.5, 7.6

🔴Vulnerability Details

5
GHSA
GHSA-9q97-qm54-9797: In Apache httpd 2↗2022-05-13
▶
OSV
apache2 vulnerabilities↗2018-04-30
▶
OSV
apache2 vulnerabilities↗2018-04-19
▶
OSV
CVE-2017-15710: In Apache httpd 2↗2018-03-26
▶
CVEList
CVE-2017-15710: In Apache httpd 2↗2018-03-26
▶

📋Vendor Advisories

5
Ubuntu
Apache vulnerabilities↗2019-04-10
▶
Ubuntu
Apache HTTP Server vulnerabilities↗2018-04-30
▶
Ubuntu
Apache HTTP Server vulnerabilities↗2018-04-19
▶
Red Hat
httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values↗2018-03-24
▶
Debian
CVE-2017-15710: apache2 - In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_auth...↗2017
▶

💬Community

2
Bugzilla
CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values [fedora-all]↗2018-03-26
▶
Bugzilla
CVE-2017-15710 httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values↗2018-03-26
▶
CVE-2017-15710 (HIGH CVSS 7.5) | In Apache httpd 2.0.23 to 2.0.65 | cvebase.io