CVE

Id
102670  
CVE No.
CVE-2017-5850  
Status
Candidate  
Description
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805549 102670 CVE-2017-5850 EXPLOIT-DB:41278  View
805550 102670 CVE-2017-5850 URL:https://www.exploit-db.com/exploits/41278/  View
805551 102670 CVE-2017-5850 FULLDISC:20170206 Remote DoS against OpenBSD http server (up to 6.0)  View
805552 102670 CVE-2017-5850 URL:http://seclists.org/fulldisclosure/2017/Feb/15  View
805553 102670 CVE-2017-5850 MLIST:[openbsd-cvs] 20170131 cvs.openbsd.org: src  View
805554 102670 CVE-2017-5850 URL:http://marc.info/?l=openbsd-cvs&m=148587359420912&w=2  View
805555 102670 CVE-2017-5850 MLIST:[oss-security] 20170202 Re: CVE requests: OpenBSD httpd - 2 DoS  View
805556 102670 CVE-2017-5850 URL:http://www.openwall.com/lists/oss-security/2017/02/02/6  View
805557 102670 CVE-2017-5850 MISC:http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html  View
805558 102670 CVE-2017-5850 MISC:https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html  View
805559 102670 CVE-2017-5850 CONFIRM:https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig  View
805560 102670 CVE-2017-5850 CONFIRM:https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig  View
805561 102670 CVE-2017-5850 CONFIRM:https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df  View
805562 102670 CVE-2017-5850 BID:95997  View
805563 102670 CVE-2017-5850 URL:http://www.securityfocus.com/bid/95997  View
805564 102670 CVE-2017-5850 SECTRACK:1037758  View

Related JVN