CVE-2017-7679

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

References

Affected packages

Git / github.com/apache/httpd

Affected ranges

Type

GIT

Repo

https://github.com/apache/httpd

Events

Introduced

cd3e5a83cd5765d12b3237631c829eaff80f8425

Fixed

34ae6b5c14599b0a2619ea29709e77f10ab07352

Introduced

da5873e80d6eee7a0838793bf68f1d0254745fbb

Fixed

3cdd2d84507d2a86eb5dab2eec96f1035bb76d6c

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0"
                },
                {
                    "fixed":  "2.2.33"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0"
                },
                {
                    "fixed":  "2.4.26"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7679.json"