CVE-2017-9798
82Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 95%
de la publicación al arma0 días
Publicada en NVD18 sept
1ª PoC18 sept
metasploit18 sept
VulnCheck+1618d
probabilidad de explotación
95%top 1% de las CVE
explotación observada
síVulnCheck
9 exploit(s) público(s)
Lo que declaran los fabricantes (VEX)
Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.
Red Hatdocumento VEX ↗
Afectado
3 productos (12 componentes)
Red Hat Software Collections · Red Hat Enterprise Linux 5 · Red Hat JBoss Web Server 3
workaround: This issue can be mitigated by configuring httpd to disallow the use of the "Limit" configuration directive in .htaccess files. The set of directives that can be used in .htaccess files is configured using the "AllowOverride" directive…
Corregido
37 productos (796 componentes)
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) · Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server · Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server · y otros 32
En investigación
1 producto
Red Hat JBoss Enterprise Web Server 1
No afectado
1 producto — porque el código vulnerable no está presente en el producto
Red Hat JBoss Enterprise Application Platform 5
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.
Productos afectados
Apache Software Foundation · Apache HTTP ServerPoCs públicas encontradas — 9
exploitdbwww.exploit-db.com/exploits/42745no verificadogithubgithub.com/brokensound77/OptionsBleed-POC-Scanner★ 19githubgithub.com/nitrado/CVE-2017-9798★ 3githubgithub.com/pabloec20/optionsbleed★ 2githubgithub.com/l0n3rs/CVE-2017-9798★ 0vulncheckvulncheck.com/xdb/c84b62822dafno verificadovulncheckvulncheck.com/xdb/43b46934de5eno verificadovulncheckvulncheck.com/xdb/b11f158716deno verificadocve_referencewww.exploit-db.com/exploits/42745/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://openwall.com/lists/oss-security/2017/09/18/2https://access.redhat.com/errata/RHSA-2017:2882https://access.redhat.com/errata/RHSA-2017:2972https://access.redhat.com/errata/RHSA-2017:3018https://access.redhat.com/errata/RHSA-2017:3113https://access.redhat.com/errata/RHSA-2017:3114https://access.redhat.com/errata/RHSA-2017:3193https://access.redhat.com/errata/RHSA-2017:3194https://access.redhat.com/errata/RHSA-2017:3195https://access.redhat.com/errata/RHSA-2017:3239https://access.redhat.com/errata/RHSA-2017:3240https://access.redhat.com/errata/RHSA-2017:3475