CVE-2017-7679

CRITICAL

Apache httpd <2.2.33, <2.4.26 - Buffer Overflow

Title source: llm

Description

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

Exploits (4)

nomisec WORKING POC 1 stars
by Al-Lord0x · poc
https://github.com/Al-Lord0x/CVE-2017-7679
github WORKING POC 1 stars
by vaishakhcv · perlpoc
https://github.com/vaishakhcv/CVE-exploits/tree/master/CVE-2017-7679
github WORKING POC
by winterwolf32 · perlpoc
https://github.com/winterwolf32/CVE_Exploits-/tree/master/CVE-2017-7679

References (40)

... and 20 more

Scores

CVSS v3 9.8
EPSS 0.4124
EPSS Percentile 97.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-119 CWE-126
Status draft

Affected Products (1)

apache/http_server < 2.2.33

Timeline

Published Jun 20, 2017
Tracked Since Feb 18, 2026