CVE-2017-7679

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

References

Affected packages

Git / github.com/apache/httpd

Affected ranges

Type

GIT

Repo

https://github.com/apache/httpd

Events

Introduced

cd3e5a83cd5765d12b3237631c829eaff80f8425

Fixed

34ae6b5c14599b0a2619ea29709e77f10ab07352

Introduced

da5873e80d6eee7a0838793bf68f1d0254745fbb

Fixed

3cdd2d84507d2a86eb5dab2eec96f1035bb76d6c

Database specific

{
    "versions": [
        {
            "introduced": "2.2.0"
        },
        {
            "fixed": "2.2.33"
        },
        {
            "introduced": "2.4.0"
        },
        {
            "fixed": "2.4.26"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7679.json"