Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2017-9798
Severity
7.5HIGH
EPSS
93.8%
top 0.13%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedSep 18
Latest updateMay 13
Description
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors incl…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages3 packages
▶CVEListV5apache_software_foundation/apache_http_serverApache HTTP Server through 2.2.34 and 2.4.x through 2.4.27
Also affects: Debian Linux 7.0, 8.0, 9.0
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-jxf6-fx3m-8x2r: Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's↗2022-05-13
OSV▶
CVE-2017-9798: Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's↗2017-09-18
CVEList▶
CVE-2017-9798: Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's↗2017-09-18