CVE-2017-7679
CRITICALApache httpd <2.2.33, <2.4.26 - Buffer Overflow
Title source: llmDescription
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
Exploits (4)
github
WORKING POC
1 stars
by vaishakhcv · perlpoc
https://github.com/vaishakhcv/CVE-exploits/tree/master/CVE-2017-7679
github
WORKING POC
by winterwolf32 · perlpoc
https://github.com/winterwolf32/CVE_Exploits-/tree/master/CVE-2017-7679
References (40)
... and 20 more
Scores
CVSS v3
9.8
EPSS
0.4124
EPSS Percentile
97.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-119
CWE-126
Status
draft
Affected Products (1)
apache/http_server
< 2.2.33
Timeline
Published
Jun 20, 2017
Tracked Since
Feb 18, 2026