Lucene search

Apache Httpd < 2.4.28 : Use-after-free when using <Limit > with an unrecognized method in .htaccess ("OptionsBleed")

🗓️ 12 Jul 2017 00:00:00Reported by Apache Team FoundationType

Use-after-free when using <Limit> with an unrecognized method in .htacces

Reporter	Title	Published	Views	Family All 181
F5 Networks	K70084351 : Apache HTTPD vulnerability CVE-2017-9798	19 Sep 201700:00	–	f5
Check Point Advisories	Apache HTTP Optionsbleed Memory Leak (CVE-2017-9798)	18 Sep 201700:00	–	checkpoint_advisories
Check Point Advisories	Apache HTTP OptionsBleed Memory Leak Scanner (CVE-2017-9798)	15 Oct 201700:00	–	checkpoint_advisories
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : Apache HTTP Server vulnerability (USN-3425-1)	20 Sep 201700:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.28 HTTP Vulnerability (OptionsBleed)	13 Oct 201700:00	–	nessus
Tenable Nessus	RHEL 6 / 7 : httpd24 (RHSA-2017:3018)	27 Apr 202400:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2 (openSUSE-2017-1083) (Optionsbleed)	22 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : httpd (EulerOS-SA-2017-1252)	1 Nov 201700:00	–	nessus
Tenable Nessus	FreeBSD : Apache -- HTTP OPTIONS method can leak server memory (76b085e2-9d33-11e7-9260-000c292ee6b8) (Optionsbleed)	20 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : httpd (EulerOS-SA-2017-1253)	1 Nov 201700:00	–	nessus

Vulners

Node

apache apache_httpdMatch2.4.27

apache apache_httpdMatch2.4.26

apache apache_httpdMatch2.4.25

apache apache_httpdMatch2.4.23

apache apache_httpdMatch2.4.20

apache apache_httpdMatch2.4.18

apache apache_httpdMatch2.4.17

apache apache_httpdMatch2.4.16

apache apache_httpdMatch2.4.12

apache apache_httpdMatch2.4.10

apache apache_httpdMatch2.4.9

apache apache_httpdMatch2.4.7

apache apache_httpdMatch2.4.6

apache apache_httpdMatch2.4.4

apache apache_httpdMatch2.4.3

apache apache_httpdMatch2.4.2

apache apache_httpdMatch2.4.1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jul 2017 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS25

CVSS37.5

EPSS0.97357