Lucene search
RedHatRHSA-2017:2882HistoryOct 11, 2017 - 3:17 p.m.
(RHSA-2017:2882) Moderate: httpd security update
2017-10-1115:17:48
access.redhat.com
139
EPSS
0.974
Percentile
99.9%
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
- A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child process to crash. (CVE-2017-9798)
Red Hat would like to thank Hanno Böck for reporting this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | ppc64le | mod_ldap | < 2.4.6-67.el7_4.5 | mod_ldap-2.4.6-67.el7_4.5.ppc64le.rpm |
| RedHat | 7 | ppc64le | mod_proxy_html | < 2.4.6-67.el7_4.5 | mod_proxy_html-2.4.6-67.el7_4.5.ppc64le.rpm |
| RedHat | 7 | ppc64 | mod_ldap | < 2.4.6-67.el7_4.5 | mod_ldap-2.4.6-67.el7_4.5.ppc64.rpm |
| RedHat | 7 | x86_64 | httpd-devel | < 2.4.6-67.el7_4.5 | httpd-devel-2.4.6-67.el7_4.5.x86_64.rpm |
| RedHat | 7 | x86_64 | mod_proxy_html | < 2.4.6-67.el7_4.5 | mod_proxy_html-2.4.6-67.el7_4.5.x86_64.rpm |
| RedHat | 7 | aarch64 | mod_session | < 2.4.6-67.el7_4.5 | mod_session-2.4.6-67.el7_4.5.aarch64.rpm |
| RedHat | 7 | aarch64 | httpd | < 2.4.6-67.el7_4.5 | httpd-2.4.6-67.el7_4.5.aarch64.rpm |
| RedHat | 7 | ppc64le | httpd-tools | < 2.4.6-67.el7_4.5 | httpd-tools-2.4.6-67.el7_4.5.ppc64le.rpm |
| RedHat | 7 | aarch64 | mod_ldap | < 2.4.6-67.el7_4.5 | mod_ldap-2.4.6-67.el7_4.5.aarch64.rpm |
| RedHat | 7 | aarch64 | httpd-tools | < 2.4.6-67.el7_4.5 | httpd-tools-2.4.6-67.el7_4.5.aarch64.rpm |
Related
ibm
ibm
Security Bulletin: Vulnerability CVE-2017-9798 in the IBM i HTTP Server affects IBM i.
2019-12-18 14:26:38
Security Bulletin: A vulnerability in httpd affects PowerKVM
2018-06-18 01:38:34
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 1:2.4.28-alt1
2017-10-10 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.28-alt1
2017-10-10 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.28-alt1
2017-10-10 00:00:00
veracode
veracode
Use After Free
2019-01-15 09:20:26
osv
osv
CVE-2017-9798
2017-09-18 15:29:00
apache2 - security update
2017-09-20 00:00:00
apache2 - security update
2017-09-21 00:00:00
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2017-10-11 20:46:20
httpd, mod_ssl security update
2017-10-20 21:13:38
openvas
openvas
Slackware: Security Advisory (SSA:2017-261-01)
2022-04-21 00:00:00
Debian: Security Advisory (DLA-1102-1)
2018-02-06 00:00:00
prion
prion
Design/Logic Flaw
2017-09-18 15:29:00
httpd
httpd
nessus
nessus
EulerOS 2.0 SP1 : httpd (EulerOS-SA-2017-1252)
2017-11-01 00:00:00
openSUSE Security Update : apache2 (openSUSE-2017-1083) (Optionsbleed)
2017-09-22 00:00:00
EulerOS 2.0 SP2 : httpd (EulerOS-SA-2017-1253)
2017-11-01 00:00:00
hackerone
hackerone
Internet Bug Bounty: Optionsbleed / CVE-2017-9798
2017-09-19 18:04:00
ubuntu
ubuntu
Apache HTTP Server vulnerability
2017-09-19 00:00:00
Apache HTTP Server vulnerability
2017-10-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache HTTP Optionsbleed Memory Leak (CVE-2017-9798)
2017-09-18 00:00:00
Apache HTTP OptionsBleed Memory Leak Scanner (CVE-2017-9798)
2017-10-15 00:00:00
redhat
redhat
(RHSA-2017:3018) Moderate: httpd24 security, bug fix, and enhancement update
2017-10-24 08:16:35
(RHSA-2017:2972) Moderate: httpd security update
2017-10-19 14:54:11
f5
f5
K70084351 : Apache HTTPD vulnerability CVE-2017-9798
2017-09-19 00:00:00
debiancve
debiancve
CVE-2017-9798
2017-09-18 15:29:00
cvelist
cvelist
CVE-2017-9798
2017-09-18 15:00:00
cve
cve
CVE-2017-9798
2017-09-18 15:29:00
slackware
slackware
[slackware-security] httpd
2017-09-18 19:20:15
debian
debian
[SECURITY] [DSA 3980-1] apache2 security update
2017-09-20 09:20:19
[SECURITY] [DLA 1102-1] apache2 security update
2017-09-21 20:42:18
[SECURITY] [DSA 3980-1] apache2 security update
2017-09-20 09:20:19
oraclelinux
oraclelinux
httpd security update
2017-10-11 00:00:00
httpd security update
2017-10-19 00:00:00
redhatcve
redhatcve
CVE-2017-9798
2019-10-09 11:45:40
seebug
seebug
freebsd
freebsd
Apache -- HTTP OPTIONS method can leak server memory
2017-09-18 00:00:00
zdt
zdt
Apache - HTTP OPTIONS Memory Leak Exploit
2017-09-18 00:00:00
amazon
amazon
Important: httpd24, httpd
2017-09-18 15:32:00
archlinux
archlinux
[ASA-201709-15] apache: information disclosure
2017-09-18 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2018-01-01 13:38:51
Updated apache packages fix security vulnerability
2018-01-01 13:38:51
fedora
fedora
[SECURITY] Fedora 26 Update: httpd-2.4.27-3.fc26
2017-09-22 18:54:37
[SECURITY] Fedora 27 Update: httpd-2.4.27-8.fc27
2017-09-30 07:40:09
[SECURITY] Fedora 26 Update: httpd-2.4.33-4.fc26
2018-05-12 18:27:28
alpinelinux
alpinelinux
CVE-2017-9798
2017-09-18 15:29:00
exploitpack
exploitpack
Apache 2.2.34 2.4.27 - OPTIONS Memory Leak
2017-09-18 00:00:00
nvd
nvd
CVE-2017-9798
2017-09-18 15:29:00
ubuntucve
ubuntucve
CVE-2017-9798
2017-09-18 00:00:00
exploitdb
exploitdb
Apache < 2.2.34 / < 2.4.27 - OPTIONS Memory Leak
2017-09-18 00:00:00
attackerkb
attackerkb
CVE-2017-9798
2017-09-18 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2017-0077
2017-10-11 00:00:00
trendmicroblog
trendmicroblog
avleonov
avleonov
Vulnerability Databases: Classification and Registry
2018-06-05 15:57:41
gentoo
gentoo
Apache: Multiple vulnerabilities
2017-10-29 00:00:00
suse
suse
Security update for virtualbox (important)
2018-04-24 03:20:04
symantec
symantec
Apache HTTP Server Vulnerabilities Jul 2017 - Sep 2018
2018-11-07 08:01:01
kitploit
kitploit
Jok3R - Network And Web Pentest Framework
2019-01-23 12:25:00
apple
apple
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00