Cloudanix VulnDB

CVE-2017-3169

Critical · 9.8

CVSS

9.8

EPSS

20.0%

Published

Jun 20, 2017

CISA due date

—

The record

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.

Affected packages

Ecosystem Package Introduced Fixed
Alpine:v3.10 apache2 0 2.4.26-r0
Alpine:v3.11 apache2 0 2.4.26-r0
Alpine:v3.12 apache2 0 2.4.26-r0
Alpine:v3.13 apache2 0 2.4.26-r0
Alpine:v3.14 apache2 0 2.4.26-r0
Alpine:v3.15 apache2 0 2.4.26-r0
Alpine:v3.16 apache2 0 2.4.26-r0
Alpine:v3.17 apache2 0 2.4.26-r0
Alpine:v3.18 apache2 0 2.4.26-r0
Alpine:v3.19 apache2 0 2.4.26-r0
Alpine:v3.20 apache2 0 2.4.26-r0
Alpine:v3.21 apache2 0 2.4.26-r0
Alpine:v3.22 apache2 0 2.4.26-r0
Alpine:v3.3 apache2 0 2.4.26-r0
Alpine:v3.4 apache2 0 2.4.26-r0
Alpine:v3.5 apache2 0 2.4.26-r0
Alpine:v3.6 apache2 0 2.4.26-r0
Alpine:v3.7 apache2 0 2.4.26-r0
Alpine:v3.8 apache2 0 2.4.26-r0
Alpine:v3.9 apache2 0 2.4.26-r0
Debian:11 apache2 0 2.4.25-4
Debian:12 apache2 0 2.4.25-4
Debian:13 apache2 0 2.4.25-4
Debian:7 apache2 0 2.2.22-13+deb7u9
Debian:8 apache2 0 2.4.10-10+deb8u9
Debian:9 apache2 0 2.4.25-3+deb9u1
Mageia:5 apache 0 2.4.10-16.7.mga5
Red Hat:enterprise_linux:6::client httpd 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::client httpd-debuginfo 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::client httpd-devel 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::client httpd-manual 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::client httpd-tools 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::client mod_ssl 0 1:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::computenode httpd 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::computenode httpd-debuginfo 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::computenode httpd-devel 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::computenode httpd-manual 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::computenode httpd-tools 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::computenode mod_ssl 0 1:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::server httpd 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::server httpd-debuginfo 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::server httpd-devel 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::server httpd-manual 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::server httpd-tools 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::server mod_ssl 0 1:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::workstation httpd 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::workstation httpd-debuginfo 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::workstation httpd-devel 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::workstation httpd-manual 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::workstation httpd-tools 0 0:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:6::workstation mod_ssl 0 1:2.2.15-60.el6_9.5
Red Hat:enterprise_linux:7::client httpd 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client httpd-debuginfo 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client httpd-devel 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client httpd-manual 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client httpd-tools 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client mod_ldap 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client mod_proxy_html 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client mod_session 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::client mod_ssl 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode httpd 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode httpd-debuginfo 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode httpd-devel 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode httpd-manual 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode httpd-tools 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode mod_ldap 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode mod_proxy_html 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode mod_session 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::computenode mod_ssl 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server httpd 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server httpd-debuginfo 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server httpd-devel 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server httpd-manual 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server httpd-tools 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server mod_ldap 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server mod_proxy_html 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server mod_session 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::server mod_ssl 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation httpd 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation httpd-debuginfo 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation httpd-devel 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation httpd-manual 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation httpd-tools 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation mod_ldap 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation mod_proxy_html 0 1:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation mod_session 0 0:2.4.6-67.el7_4.2
Red Hat:enterprise_linux:7::workstation mod_ssl 0 1:2.4.6-67.el7_4.2
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd-debuginfo 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd-devel 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd-libs 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd-manual 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd-selinux 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-httpd-tools 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_bmx 0 0:0.9.6-15.GA.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_bmx-debuginfo 0 0:0.9.6-15.GA.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_cluster-native 0 0:1.3.8-1.Final_redhat_1.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_cluster-native-debuginfo 0 0:1.3.8-1.Final_redhat_1.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_ldap 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_proxy_html 0 1:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_session 0 0:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el6 jbcs-httpd24-mod_ssl 0 1:2.4.23-125.jbcs.el6
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-debuginfo 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-devel 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-libs 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-manual 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-selinux 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-tools 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_bmx 0 0:0.9.6-15.GA.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_bmx-debuginfo 0 0:0.9.6-15.GA.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_cluster-native 0 0:1.3.8-1.Final_redhat_1.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_cluster-native-debuginfo 0 0:1.3.8-1.Final_redhat_1.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_ldap 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_proxy_html 0 1:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_session 0 0:2.4.23-125.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_ssl 0 1:2.4.23-125.jbcs.el7
Red Hat:rhel_eus:6.7::computenode httpd 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::computenode httpd-debuginfo 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::computenode httpd-devel 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::computenode httpd-manual 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::computenode httpd-tools 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::computenode mod_ssl 0 1:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::server httpd 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::server httpd-debuginfo 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::server httpd-devel 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::server httpd-manual 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::server httpd-tools 0 0:2.2.15-47.el6_7.5
Red Hat:rhel_eus:6.7::server mod_ssl 0 1:2.2.15-47.el6_7.5
Red Hat:rhel_eus:7.2::computenode httpd 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode httpd-debuginfo 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode httpd-devel 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode httpd-manual 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode httpd-tools 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode mod_ldap 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode mod_proxy_html 0 1:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode mod_session 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::computenode mod_ssl 0 1:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server httpd 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server httpd-debuginfo 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server httpd-devel 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server httpd-manual 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server httpd-tools 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server mod_ldap 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server mod_proxy_html 0 1:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server mod_session 0 0:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.2::server mod_ssl 0 1:2.4.6-40.el7_2.6
Red Hat:rhel_eus:7.3::computenode httpd 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode httpd-debuginfo 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode httpd-devel 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode httpd-manual 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode httpd-tools 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode mod_ldap 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode mod_proxy_html 0 1:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode mod_session 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::computenode mod_ssl 0 1:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server httpd 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server httpd-debuginfo 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server httpd-devel 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server httpd-manual 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server httpd-tools 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server mod_ldap 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server mod_proxy_html 0 1:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server mod_session 0 0:2.4.6-45.el7_3.5
Red Hat:rhel_eus:7.3::server mod_ssl 0 1:2.4.6-45.el7_3.5
Red Hat:rhel_software_collections:2::el6 httpd24-httpd 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-httpd-debuginfo 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-httpd-devel 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-httpd-manual 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-httpd-tools 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-mod_ldap 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-mod_proxy_html 0 1:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-mod_session 0 0:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el6 httpd24-mod_ssl 0 1:2.4.25-9.el6.1
Red Hat:rhel_software_collections:2::el7 httpd24-httpd 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-httpd-debuginfo 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-httpd-devel 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-httpd-manual 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-httpd-tools 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-mod_ldap 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-mod_proxy_html 0 1:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-mod_session 0 0:2.4.25-9.el7.1
Red Hat:rhel_software_collections:2::el7 httpd24-mod_ssl 0 1:2.4.25-9.el7.1
SUSE:Linux Enterprise Point of Sale 11 SP3 apache2 0 2.2.34-70.12.1
SUSE:Linux Enterprise Server 11 SP3-LTSS apache2 0 2.2.34-70.12.1
SUSE:Linux Enterprise Server 11 SP3-TERADATA apache2 0 2.2.34-70.12.1
SUSE:Linux Enterprise Server 11 SP4 apache2 0 2.2.34-70.12.1
SUSE:Linux Enterprise Server 12 SP1-LTSS apache2 0 2.4.16-20.10.1
SUSE:Linux Enterprise Server 12 SP2 apache2 0 2.4.23-28.1
SUSE:Linux Enterprise Server 12-LTSS apache2 0 2.4.10-14.28.1
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 apache2 0 2.4.23-28.1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 apache2 0 2.2.34-70.12.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 apache2 0 2.4.16-20.10.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 apache2 0 2.4.23-28.1
SUSE:Linux Enterprise Software Development Kit 11 SP4 apache2 0 2.2.34-70.12.1
SUSE:Linux Enterprise Software Development Kit 12 SP2 apache2 0 2.4.23-28.1
SUSE:OpenStack Cloud 6 apache2 0 2.4.16-20.10.1
SUSE:Studio Onsite 1.3 apache2 0 2.2.34-70.12.1
Ubuntu:14.04:LTS apache2 0 2.4.7-1ubuntu4.16
Ubuntu:16.04:LTS apache2 0 2.4.18-2ubuntu3.3

Related vulnerabilities