CVE-2017-9788 in the critical feed json
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not init…
published 2017-07-13 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-18716
- cvss
- 9.1
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 56.8%
- EPSS 56.8% chance of exploitation in 30 days, percentile 99%
- public exploits
- 0
- none known
Summary
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.
Patch / fix
- apple mac_os_x 10.13.1
- apache2 Debian 14, Debian 13, Debian 12 2.4.27-1
debian advisories DEBIAN-CVE-2017-9788
- apache2 Ubuntu 14.04 LTS 2.4.7-1ubuntu4.17
- apache2 Ubuntu 16.04 LTS 2.4.18-2ubuntu3.4
ubuntu advisories UBUNTU-CVE-2017-9788
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- httpd jboss enterprise web server 2, jboss enterprise application platform 6 2.2.26-57.ep6.el6
- httpd22 jboss enterprise web server 2, jboss enterprise application platform 6 2.2.26-58.ep6.el7
- mod_ssl jboss enterprise web server 2, jboss enterprise application platform 6 1:2.2.26-57.ep6.el6
- tomcat6 jboss enterprise web server 2 6.0.41-19_patch_04.ep6.el6
- tomcat6 jboss enterprise web server 2 6.0.41-19_patch_04.ep6.el7
- tomcat7 jboss enterprise web server 2 7.0.54-28_patch_05.ep6.el6
- tomcat7 jboss enterprise web server 2 7.0.54-28_patch_05.ep6.el7
- mod_ldap jboss enterprise web server 2, jboss enterprise application platform 6 2.2.26-57.ep6.el6
red hat advisories RHSA-2017:3113RHSA-2017:3195RHSA-2017:3194RHSA-2017:3193RHSA-2017:3240RHSA-2017:2478
- apache2 SLES for SAP 12 SP1, SLES 12 SP1-LTSS, OpenStack Cloud 6 2.4.16-20.10.1
- apache2 Studio Onsite 1.3, SLES for SAP 11 SP4, SLES 11 SP4 +1 more 2.2.34-70.5.1
- apache2 SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2 +4 more 2.4.23-29.3.2
- apache2 SLES 12-LTSS 2.4.10-14.28.1
suse advisories SUSE-SU-2017:2756-1SUSE-SU-2017:2449-1SUSE-SU-2017:1997-1SUSE-SU-2017:1961-1
- apache Arch Linux 2.4.27-1
arch linux advisories AVG-350
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2017-9788 updated cvss 4.8
httpd: Uninitialized memory reflection in mod_auth_digest
-
Red Hat Enterprise Linux 5 httpdaffected: workaround, no fix planned “Will not fix”
-
Red Hat JBoss Enterprise Web Server 3 httpdaffected: workaround, no fix available “Fix deferred”
-
Red Hat Enterprise Linux Client Optional (v. 7) httpd 2.4.6-67.el7_4.2, mod_ssl 2.4.6-67.el7_4.2, mod_ldap 2.4.6-67.el7_4.2, httpd-tools 2.4.6-67.el7_4.2, mod_session 2.4.6-67.el7_4.2, httpd-manual 2.4.6-67.el7_4.2, +1 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) httpd 2.4.6-67.el7_4.2, mod_ssl 2.4.6-67.el7_4.2, mod_ldap 2.4.6-67.el7_4.2, httpd-tools 2.4.6-67.el7_4.2, mod_session 2.4.6-67.el7_4.2, httpd-manual 2.4.6-67.el7_4.2, +1 morefixed: vendor fix RHSA-2017:2479
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) httpd 2.4.6-40.el7_2.6, mod_ssl 2.4.6-40.el7_2.6, mod_ldap 2.4.6-40.el7_2.6, httpd-tools 2.4.6-40.el7_2.6, mod_session 2.4.6-40.el7_2.6, httpd-manual 2.4.6-40.el7_2.6, +1 morefixed: vendor fix RHSA-2017:3193
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) httpd 2.4.6-45.el7_3.5, mod_ssl 2.4.6-45.el7_3.5, mod_ldap 2.4.6-45.el7_3.5, httpd-tools 2.4.6-45.el7_3.5, mod_session 2.4.6-45.el7_3.5, httpd-manual 2.4.6-45.el7_3.5, +1 morefixed: vendor fix RHSA-2017:3194
-
Red Hat Enterprise Linux Desktop (v. 6) httpd 2.2.15-60.el6_9.5, httpd-tools 2.2.15-60.el6_9.5 Red Hat Enterprise Linux Desktop Optional (v. 6) mod_ssl 2.2.15-60.el6_9.5, httpd-manual 2.2.15-60.el6_9.5 Red Hat Enterprise Linux HPC Node (v. 6) httpd 2.2.15-60.el6_9.5, httpd-tools 2.2.15-60.el6_9.5fixed: vendor fix RHSA-2017:2478
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.7) httpd 2.2.15-47.el6_7.5, httpd-tools 2.2.15-47.el6_7.5fixed: vendor fix RHSA-2017:3195
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_ssl 2.2.15-60.el6_9.5, httpd-manual 2.2.15-60.el6_9.5fixed: vendor fix RHSA-2017:2478
show 20 moreshow fewer
-
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) mod_ssl 2.2.15-47.el6_7.5, httpd-manual 2.2.15-47.el6_7.5fixed: vendor fix RHSA-2017:3195
-
Red Hat Enterprise Linux Server (v. 6) httpd 2.2.15-60.el6_9.5, mod_ssl 2.2.15-60.el6_9.5, httpd-tools 2.2.15-60.el6_9.5, httpd-manual 2.2.15-60.el6_9.5fixed: vendor fix RHSA-2017:2478
-
Red Hat Enterprise Linux Server (v. 7) httpd 2.4.6-67.el7_4.2, mod_ssl 2.4.6-67.el7_4.2, httpd-tools 2.4.6-67.el7_4.2, mod_session 2.4.6-67.el7_4.2, httpd-manual 2.4.6-67.el7_4.2fixed: vendor fix RHSA-2017:2479
-
Red Hat Enterprise Linux Server EUS (v. 6.7) httpd 2.2.15-47.el6_7.5, mod_ssl 2.2.15-47.el6_7.5, httpd-tools 2.2.15-47.el6_7.5, httpd-manual 2.2.15-47.el6_7.5fixed: vendor fix RHSA-2017:3195
-
Red Hat Enterprise Linux Server EUS (v. 7.2) httpd 2.4.6-40.el7_2.6, mod_ssl 2.4.6-40.el7_2.6, httpd-tools 2.4.6-40.el7_2.6, httpd-manual 2.4.6-40.el7_2.6fixed: vendor fix RHSA-2017:3193
-
Red Hat Enterprise Linux Server EUS (v. 7.3) httpd 2.4.6-45.el7_3.5, mod_ssl 2.4.6-45.el7_3.5, httpd-tools 2.4.6-45.el7_3.5, httpd-manual 2.4.6-45.el7_3.5fixed: vendor fix RHSA-2017:3194
-
Red Hat Enterprise Linux Server Optional (v. 7) mod_ldap 2.4.6-67.el7_4.2, mod_proxy_html 2.4.6-67.el7_4.2fixed: vendor fix RHSA-2017:2479
-
Red Hat Enterprise Linux Server Optional EUS (v. 7.2) mod_ldap 2.4.6-40.el7_2.6, mod_session 2.4.6-40.el7_2.6, mod_proxy_html 2.4.6-40.el7_2.6fixed: vendor fix RHSA-2017:3193
-
Red Hat Enterprise Linux Server Optional EUS (v. 7.3) mod_ldap 2.4.6-45.el7_3.5, mod_session 2.4.6-45.el7_3.5, mod_proxy_html 2.4.6-45.el7_3.5fixed: vendor fix RHSA-2017:3194
-
Red Hat Enterprise Linux Workstation (v. 6) httpd 2.2.15-60.el6_9.5, mod_ssl 2.2.15-60.el6_9.5, httpd-tools 2.2.15-60.el6_9.5, httpd-manual 2.2.15-60.el6_9.5fixed: vendor fix RHSA-2017:2478
-
Red Hat Enterprise Linux Workstation (v. 7) httpd 2.4.6-67.el7_4.2, mod_ssl 2.4.6-67.el7_4.2, httpd-tools 2.4.6-67.el7_4.2, mod_session 2.4.6-67.el7_4.2, httpd-manual 2.4.6-67.el7_4.2 Red Hat Enterprise Linux Workstation Optional (v. 7) mod_ldap 2.4.6-67.el7_4.2, mod_proxy_html 2.4.6-67.el7_4.2fixed: vendor fix RHSA-2017:2479
-
Red Hat JBoss Core Servicesfixed: vendor fix RHSA-2017:2708
-
Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-httpd 2.4.23-122.jbcs.el6, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el6, jbcs-httpd24-mod_ssl 2.4.23-122.jbcs.el6, jbcs-httpd24-mod_ldap 2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-libs 2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-tools 2.4.23-122.jbcs.el6, +6 morefixed: vendor fix RHSA-2017:2710
-
Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd 2.4.23-122.jbcs.el7, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el7, jbcs-httpd24-mod_ssl 2.4.23-122.jbcs.el7, jbcs-httpd24-mod_ldap 2.4.23-122.jbcs.el7, jbcs-httpd24-httpd-libs 2.4.23-122.jbcs.el7, jbcs-httpd24-httpd-tools 2.4.23-122.jbcs.el7, +6 morefixed: vendor fix RHSA-2017:2709
-
Red Hat JBoss Enterprise Application Platform 6.4fixed: vendor fix RHSA-2017:3239
-
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server httpd 2.2.26-57.ep6.el6, mod_ssl 2.2.26-57.ep6.el6, mod_ldap 2.2.26-57.ep6.el6, httpd-tools 2.2.26-57.ep6.el6, httpd-manual 2.2.26-57.ep6.el6, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el6, +3 more Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server httpd22 2.2.26-58.ep6.el7, mod_ssl22 2.2.26-58.ep6.el7, mod_ldap22 2.2.26-58.ep6.el7, httpd22-tools 2.2.26-58.ep6.el7, httpd22-manual 2.2.26-58.ep6.el7, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el7, +3 morefixed: vendor fix RHSA-2017:3240
-
Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server httpd 2.2.26-57.ep6.el6, mod_ssl 2.2.26-57.ep6.el6, mod_ldap 2.2.26-57.ep6.el6, httpd-tools 2.2.26-57.ep6.el6, httpd-manual 2.2.26-57.ep6.el6, tomcat6 6.0.41-19_patch_04.ep6.el6, +23 more Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server httpd22 2.2.26-58.ep6.el7, mod_ssl22 2.2.26-58.ep6.el7, mod_ldap22 2.2.26-58.ep6.el7, httpd22-tools 2.2.26-58.ep6.el7, httpd22-manual 2.2.26-58.ep6.el7, tomcat6 6.0.41-19_patch_04.ep6.el7, +23 morefixed: vendor fix RHSA-2017:3113
-
Red Hat JBoss Web Server 2.1fixed: vendor fix RHSA-2017:3114
-
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) httpd24-httpd 2.4.25-9.el6.1, httpd24-mod_ssl 2.4.25-9.el6.1, httpd24-mod_ldap 2.4.25-9.el6.1, httpd24-httpd-tools 2.4.25-9.el6.1, httpd24-mod_session 2.4.25-9.el6.1, httpd24-httpd-manual 2.4.25-9.el6.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) httpd24-httpd 2.4.25-9.el7.1, httpd24-mod_ssl 2.4.25-9.el7.1, httpd24-mod_ldap 2.4.25-9.el7.1, httpd24-httpd-tools 2.4.25-9.el7.1, httpd24-mod_session 2.4.25-9.el7.1, httpd24-httpd-manual 2.4.25-9.el7.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) httpd24-httpd 2.4.25-9.el6.1, httpd24-mod_ssl 2.4.25-9.el6.1, httpd24-mod_ldap 2.4.25-9.el6.1, httpd24-httpd-tools 2.4.25-9.el6.1, httpd24-mod_session 2.4.25-9.el6.1, httpd24-httpd-manual 2.4.25-9.el6.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) httpd24-httpd 2.4.25-9.el7.1, httpd24-mod_ssl 2.4.25-9.el7.1, httpd24-mod_ldap 2.4.25-9.el7.1, httpd24-httpd-tools 2.4.25-9.el7.1, httpd24-mod_session 2.4.25-9.el7.1, httpd24-httpd-manual 2.4.25-9.el7.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) httpd24-httpd 2.4.25-9.el6.1, httpd24-mod_ssl 2.4.25-9.el6.1, httpd24-mod_ldap 2.4.25-9.el6.1, httpd24-httpd-tools 2.4.25-9.el6.1, httpd24-mod_session 2.4.25-9.el6.1, httpd24-httpd-manual 2.4.25-9.el6.1, +1 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) httpd24-httpd 2.4.25-9.el7.1, httpd24-mod_ssl 2.4.25-9.el7.1, httpd24-mod_ldap 2.4.25-9.el7.1, httpd24-httpd-tools 2.4.25-9.el7.1, httpd24-mod_session 2.4.25-9.el7.1, httpd24-httpd-manual 2.4.25-9.el7.1, +1 morefixed: vendor fix RHSA-2017:2483
-
Red Hat JBoss Enterprise Application Platform 5 httpdnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
56.77% chance of exploitation in the next 30 days, higher than 99% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Affected products
- Apache Software Foundation Apache HTTP Server
Classification
- Weakness
- Technology feeds
References
-
oracle.com
/technetwork/security-advisory/cpuoct2017-3236626.html
patch, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3113
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:2479
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:2483
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3240
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:2709
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3195
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3239
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3114
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3194
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:3193
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:2710
vendor-advisory, third-party-advisory
-
debian.org
/security/2017/dsa-3913
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2017:2708
vendor-advisory, third-party-advisory
-
security.gentoo.org
/glsa/201710-32
vendor-advisory
-
access.redhat.com
/errata/RHSA-2017:2478
vendor-advisory, third-party-advisory
-
httpd.apache.org
/security/vulnerabilities_22.html
vendor-advisory
-
httpd.apache.org
/security/vulnerabilities_24.html
vendor-advisory
- support.apple.com /HT208221
- support.hpe.com /hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us
- security.netapp.com /advisory/ntap-20170911-0002/
-
lists.apache.org
/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb%40%3Cannounce.httpd.apache.org%3E
mailing-list
-
securityfocus.com
/bid/99569
vdb-entry, third-party-advisory
-
securitytracker.com
/id/1038906
vdb-entry, third-party-advisory
-
lists.apache.org
/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
mailing-list
- tenable.com /security/tns-2019-09
-
lists.apache.org
/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
mailing-list
- lists.apache.org /thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E
- lists.apache.org /thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E
- lists.apache.org /thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
- lists.apache.org /thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E
- lists.apache.org /thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E
- lists.apache.org /thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E
Sources
- CVE List CVE-2017-9788
- NVD CVE-2017-9788
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.