CVE-2017-7679
20.06.2017, 01:29
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | 2.2.0 ≤ 𝑥 < 2.2.33 |
| apache | http_server | 2.4.0 ≤ 𝑥 < 2.4.26 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
| ||||||||||||
| apache2-doc |
| ||||||||||||
| apache2-example-pages |
| ||||||||||||
| apache2-prefork |
| ||||||||||||
| apache2-utils |
| ||||||||||||
| apache2-worker |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| httpd |
| ||||
| httpd-devel |
| ||||
| httpd-manual |
| ||||
| httpd-tools |
| ||||
| mod |
|
Common Weakness Enumeration
- CWE-126 - Buffer Over-readThe software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
References