CVE-2017-10869 Memory corruption in H2O
Remote attackers can cause a denial-of-service in the H2O web server via a buffer overflow vulnerability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-10869?
CVE-2017-10869 is a high-severity memory corruption vulnerability in Kazuho Oku H2O, published on 22 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.
Weakness: CWE-119
Which versions are affected by CVE-2017-10869?
It affects 1 product.
Products include Dena H2o.
How do I fix CVE-2017-10869?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-10869 being exploited?
There is no known exploitation of CVE-2017-10869 in the wild and no public exploit code.
Other vulnerabilities in Kazuho Oku H2O
Sources
Also known as DEBIAN-CVE-2017-10869, GHSA-874p-r2p7-p9cg.