BSA-2017-364

🗓️ 25 Aug 2017 00:00:00Reported by Broadcom Security ResponseType

Apache HTTPD token list parsing bug lets ap_find_token run past input, causing segfault or incorrect value.

Reporter	Title	Published	Views	Family All 141
FreeBSD	Apache httpd -- several vulnerabilities	20 Jun 201700:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway	16 Jun 201822:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-7679, CVE-2017-7668, CVE-2017-3167)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in HTTPD affect IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	10 Jul 201816:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in apache2 affect IBM Flex System Manager (FSM)	18 Jun 201801:42	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache HTTP Server Vulnerabilities which is used by IBM PureApplication Systems (CVE-2017-7668)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Network Manager IP Edition	17 Jun 201815:43	–	ibm

20 Sep 2018 18:20Current

9.1High risk

Vulners AI Score9.1

CVSS 25

CVSS 3.17.5

EPSS0.64829