CVE-2017-9798
Description
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.
How to fix
- access.redhat.com/errata/RHSA-2017:3113
- access.redhat.com/errata/RHSA-2017:2882
- access.redhat.com/errata/RHSA-2017:2972
- access.redhat.com/errata/RHSA-2017:3475
- access.redhat.com/errata/RHSA-2017:3240
- access.redhat.com/errata/RHSA-2017:3195
- access.redhat.com/errata/RHSA-2017:3018
- access.redhat.com/errata/RHSA-2017:3239
- access.redhat.com/errata/RHSA-2017:3476
- access.redhat.com/errata/RHSA-2017:3114
- access.redhat.com/errata/RHSA-2017:3477
- access.redhat.com/errata/RHSA-2017:3194
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache http_server | v ≤ 2.2.34, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.6, 2.4.7, 2.4.9, 2.4.10, 2.4.12, 2.4.16, 2.4.17, 2.4.18, 2.4.20, 2.4.23, 2.4.25, 2.4.26, 2.4.27 | — |
| debian debian_linux | 7.0, 8.0, 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.