CVE-2017-0886: Medium severity nextcloud server vulnerability
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0886?
CVE-2017-0886 has a severity rating that indicates a potential Denial of Service vulnerability affecting Nextcloud Server.
How do I fix CVE-2017-0886?
To fix CVE-2017-0886, update Nextcloud Server to version 9.0.55 or later, or 10.0.2 or later.
Who is affected by CVE-2017-0886?
CVE-2017-0886 affects Nextcloud Server versions prior to 9.0.55 and between 10.0.0 and 10.0.2.
What causes CVE-2017-0886?
CVE-2017-0886 is caused by an error in the application logic that allows an authenticated adversary to create endless recursion.
What is the potential impact of CVE-2017-0886?
The potential impact of CVE-2017-0886 is a Denial of Service, which can disrupt normal operations of Nextcloud Server.