Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-9788

Fixed in a distro release EPSS 57%

In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.

Published 2017-07-13 · CVE record · OSV

Products: Apache Software Foundation Apache HTTP Server

Distro releases

ReleasePackageFixed in
Arch Linuxapache2.4.27-1
Debian 12apache22.4.27-1
Debian 13apache22.4.27-1
Debian 14apache22.4.27-1
Debian 7apache22.2.22-13+deb7u10
Debian 8apache22.4.10-10+deb8u10
Debian 9apache22.4.25-3+deb9u2
Red Hat Enterprise Linux 6httpd0:2.2.15-60.el6_9.5
Red Hat Enterprise Linux 6httpd-debuginfo0:2.2.15-60.el6_9.5
Red Hat Enterprise Linux 6httpd-devel0:2.2.15-60.el6_9.5
Red Hat Enterprise Linux 6httpd-manual0:2.2.15-60.el6_9.5
Red Hat Enterprise Linux 6httpd-tools0:2.2.15-60.el6_9.5
Red Hat Enterprise Linux 6mod_ssl1:2.2.15-60.el6_9.5
Red Hat Enterprise Linux 7httpd0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7httpd-debuginfo0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7httpd-devel0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7httpd-manual0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7httpd-tools0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7mod_ldap0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7mod_proxy_html1:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7mod_session0:2.4.6-67.el7_4.2
Red Hat Enterprise Linux 7mod_ssl1:2.4.6-67.el7_4.2
Red Hat jboss core services 1jbcs-httpd24-httpd0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-httpd0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-debuginfo0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-debuginfo0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-httpd-devel0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-httpd-devel0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-libs0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-libs0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-httpd-manual0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-manual0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-httpd-selinux0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-selinux0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-httpd-tools0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-httpd-tools0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-mod_ldap0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-mod_ldap0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-mod_proxy_html1:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-mod_proxy_html1:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-mod_session0:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-mod_session0:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-mod_ssl1:2.4.23-122.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-mod_ssl1:2.4.23-122.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-openssl1:1.0.2h-14.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-openssl1:1.0.2h-14.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-openssl-debuginfo1:1.0.2h-14.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-openssl-debuginfo1:1.0.2h-14.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-openssl-devel1:1.0.2h-14.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-openssl-devel1:1.0.2h-14.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-openssl-libs1:1.0.2h-14.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-openssl-libs1:1.0.2h-14.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-openssl-perl1:1.0.2h-14.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-openssl-perl1:1.0.2h-14.jbcs.el7
Red Hat jboss core services 1jbcs-httpd24-openssl-static1:1.0.2h-14.jbcs.el6
Red Hat jboss core services 1jbcs-httpd24-openssl-static1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6httpd0:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6httpd-debuginfo0:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6httpd-devel0:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6httpd-manual0:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6httpd-tools0:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6httpd220:2.2.26-58.ep6.el7
Red Hat jboss enterprise application platform 6httpd22-debuginfo0:2.2.26-58.ep6.el7
Red Hat jboss enterprise application platform 6httpd22-devel0:2.2.26-58.ep6.el7
Red Hat jboss enterprise application platform 6httpd22-manual0:2.2.26-58.ep6.el7
Red Hat jboss enterprise application platform 6httpd22-tools0:2.2.26-58.ep6.el7
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-debuginfo1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-debuginfo1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-devel1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-devel1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-libs1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-libs1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-perl1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-perl1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-static1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise application platform 6jbcs-httpd24-openssl-static1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise application platform 6mod_cluster-native0:1.2.13-9.Final_redhat_2.ep6.el7
Red Hat jboss enterprise application platform 6mod_cluster-native0:1.2.13-9.Final_redhat_2.ep6.el6
Red Hat jboss enterprise application platform 6mod_cluster-native-debuginfo0:1.2.13-9.Final_redhat_2.ep6.el7
Red Hat jboss enterprise application platform 6mod_cluster-native-debuginfo0:1.2.13-9.Final_redhat_2.ep6.el6
Red Hat jboss enterprise application platform 6mod_ldap0:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6mod_ldap220:2.2.26-58.ep6.el7
Red Hat jboss enterprise application platform 6mod_ssl1:2.2.26-57.ep6.el6
Red Hat jboss enterprise application platform 6mod_ssl221:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2httpd0:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2httpd-debuginfo0:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2httpd-devel0:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2httpd-manual0:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2httpd-tools0:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2httpd220:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2httpd22-debuginfo0:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2httpd22-devel0:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2httpd22-manual0:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2httpd22-tools0:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-debuginfo1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-debuginfo1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-devel1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-devel1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-libs1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-libs1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-perl1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-perl1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-static1:1.0.2h-14.jbcs.el7
Red Hat jboss enterprise web server 2jbcs-httpd24-openssl-static1:1.0.2h-14.jbcs.el6
Red Hat jboss enterprise web server 2mod_cluster-native0:1.2.13-9.Final_redhat_2.ep6.el7
Red Hat jboss enterprise web server 2mod_cluster-native0:1.2.13-9.Final_redhat_2.ep6.el6
Red Hat jboss enterprise web server 2mod_cluster-native-debuginfo0:1.2.13-9.Final_redhat_2.ep6.el7
Red Hat jboss enterprise web server 2mod_cluster-native-debuginfo0:1.2.13-9.Final_redhat_2.ep6.el6
Red Hat jboss enterprise web server 2mod_ldap0:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2mod_ldap220:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2mod_ssl1:2.2.26-57.ep6.el6
Red Hat jboss enterprise web server 2mod_ssl221:2.2.26-58.ep6.el7
Red Hat jboss enterprise web server 2tomcat60:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat60:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-admin-webapps0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-admin-webapps0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-docs-webapp0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-docs-webapp0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-el-2.1-api0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-el-2.1-api0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-javadoc0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-javadoc0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-jsp-2.1-api0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-jsp-2.1-api0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-lib0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-lib0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-log4j0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-log4j0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-maven-devel0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-maven-devel0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-servlet-2.5-api0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-servlet-2.5-api0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat6-webapps0:6.0.41-19_patch_04.ep6.el6
Red Hat jboss enterprise web server 2tomcat6-webapps0:6.0.41-19_patch_04.ep6.el7
Red Hat jboss enterprise web server 2tomcat70:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat70:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-admin-webapps0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-admin-webapps0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-docs-webapp0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-docs-webapp0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-el-2.2-api0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-el-2.2-api0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-javadoc0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-javadoc0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-jsp-2.2-api0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-jsp-2.2-api0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-lib0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-lib0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-log4j0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-log4j0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-maven-devel0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-maven-devel0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-servlet-3.0-api0:7.0.54-28_patch_05.ep6.el7
Red Hat jboss enterprise web server 2tomcat7-servlet-3.0-api0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-webapps0:7.0.54-28_patch_05.ep6.el6
Red Hat jboss enterprise web server 2tomcat7-webapps0:7.0.54-28_patch_05.ep6.el7
Red Hat rhel eus 6.7httpd0:2.2.15-47.el6_7.5
Red Hat rhel eus 6.7httpd-debuginfo0:2.2.15-47.el6_7.5
Red Hat rhel eus 6.7httpd-devel0:2.2.15-47.el6_7.5
Red Hat rhel eus 6.7httpd-manual0:2.2.15-47.el6_7.5
Red Hat rhel eus 6.7httpd-tools0:2.2.15-47.el6_7.5
Red Hat rhel eus 6.7mod_ssl1:2.2.15-47.el6_7.5
Red Hat rhel eus 7.2httpd0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2httpd-debuginfo0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2httpd-devel0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2httpd-manual0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2httpd-tools0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2mod_ldap0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2mod_proxy_html1:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2mod_session0:2.4.6-40.el7_2.6
Red Hat rhel eus 7.2mod_ssl1:2.4.6-40.el7_2.6
Red Hat rhel eus 7.3httpd0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3httpd-debuginfo0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3httpd-devel0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3httpd-manual0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3httpd-tools0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3mod_ldap0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3mod_proxy_html1:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3mod_session0:2.4.6-45.el7_3.5
Red Hat rhel eus 7.3mod_ssl1:2.4.6-45.el7_3.5
Red Hat rhel software collections 2httpd24-httpd0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-httpd0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-httpd-debuginfo0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-httpd-debuginfo0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-httpd-devel0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-httpd-devel0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-httpd-manual0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-httpd-manual0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-httpd-tools0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-httpd-tools0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-mod_ldap0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-mod_ldap0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-mod_proxy_html1:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-mod_proxy_html1:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-mod_session0:2.4.25-9.el7.1
Red Hat rhel software collections 2httpd24-mod_session0:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-mod_ssl1:2.4.25-9.el6.1
Red Hat rhel software collections 2httpd24-mod_ssl1:2.4.25-9.el7.1
SUSE Linux Enterprise Server 11 SP4apache22.2.34-70.5.1
SUSE Linux Enterprise Server 12 SP1-LTSSapache22.4.16-20.10.1
SUSE Linux Enterprise Server 12 SP2apache22.4.23-29.3.2
SUSE Linux Enterprise Server 12 SP3apache22.4.23-29.3.2
SUSE Linux Enterprise Server 12-LTSSapache22.4.10-14.28.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2apache22.4.23-29.3.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4apache22.2.34-70.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1apache22.4.16-20.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2apache22.4.23-29.3.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3apache22.4.23-29.3.2
SUSE Linux Enterprise Software Development Kit 11 SP4apache22.2.34-70.5.1
SUSE Linux Enterprise Software Development Kit 12 SP2apache22.4.23-29.3.2
SUSE Linux Enterprise Software Development Kit 12 SP3apache22.4.23-29.3.2
SUSE OpenStack Cloud 6apache22.4.16-20.10.1
SUSE Studio Onsite 1.3apache22.2.34-70.5.1
Ubuntu 14.04 LTSapache22.4.7-1ubuntu4.17
Ubuntu 16.04 LTSapache22.4.18-2ubuntu3.4