SERVER-APACHE Apache HTTP Server possible OPTIONS method memory leak attempt
This event is generated when a HTTP OPTIONS method is attempted.
Attempted User Privilege Gain
CVE-2017-9798:
CVSS base score 7.5
CVSS impact score 3.6
CVSS exploitability score 3.9
Confidentiality Impact HIGH
Integrity Impact NONE
Availability Impact NONE
CVE-2017-9798: Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the aplimitsection function in server/core.c.
CVE-2017-9798:
Access Vector
Access Complexity
Authentication
None Known
None Known
©2019 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
Privacy Policy | Snort License | FAQ | Sitemap
