BSA-2017-365

🗓️ 25 Aug 2017 00:00:00Reported by Broadcom Security ResponseType

Apache httpd mod_mime can read one byte past buffer end when handling a malicious Content-Type header in versions before 2.2.33 and 2.4.26.

Reporter	Title	Published	Views	Family All 184
FreeBSD	Apache httpd -- several vulnerabilities	20 Jun 201700:00	–	freebsd
Gitee	Exploit for Cross-site Scripting in Jquery	6 Sep 202502:16	–	gitee
IBM Security Bulletins	Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway	16 Jun 201822:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-7679, CVE-2017-7668, CVE-2017-3167)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in HTTPD affect IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	10 Jul 201816:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in apache2 affect IBM Flex System Manager (FSM)	18 Jun 201801:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Network Manager IP Edition	17 Jun 201815:43	–	ibm

25 Aug 2017 18:35Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 39.8

EPSS0.30062