CVE-2017-7679

CRITICAL

Apache httpd <2.2.33, <2.4.26 - Buffer Overflow

Title source: llm

Description

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

Exploits (4)

nomisec WORKING POC 1 stars
by Al-Lord0x · poc
https://github.com/Al-Lord0x/CVE-2017-7679
github WORKING POC 1 stars
by vaishakhcv · perlpoc
https://github.com/vaishakhcv/CVE-exploits/tree/master/CVE-2017-7679
github WORKING POC
by winterwolf32 · perlpoc
https://github.com/winterwolf32/CVE_Exploits-/tree/master/CVE-2017-7679

References (40)

... and 20 more

Scores

CVSS v3 9.8
EPSS 0.3006
EPSS Percentile 96.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119 CWE-126
Status published
Products (3)
apache/http_server 2.2.0 - 2.2.33
Apache Software Foundation/Apache HTTP Server 2.2.0 to 2.2.32
Apache Software Foundation/Apache HTTP Server 2.4.0 to 2.4.25
Published Jun 20, 2017
Tracked Since Feb 18, 2026