$ cve CVE-2017-9798 JSON

CVE-2017-9798 EXPLOIT

7.5

HIGH · CVSS 3.1 · EPSS 95% (pctl 100)

Patch early

A public exploit exists.

Description

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.

Scoring

CVSS	7.5 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS	95% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-416
On CISA KEV	no
Public exploit	yes
Published	2017-09-18
Last modified	2026-06-17

Affected (2)

Vendor	Product
apache	http server
debian	debian linux

Public exploits

Source	Title	Date
exploit-db	Apache < 2.2.34 / < 2.4.27 - OPTIONS Memory Leak	2017-09-18

References

→ the Explorer · watch your stack · NVD