CVE-2017-1000118: Buffer Overflow
Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
azurelinux/httpdto a version that resolves this vulnerability.Fixed in 2.4.49-1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000118?
CVE-2017-1000118 has a severity rating of high due to its potential to cause a Denial of Service through a StackOverflowError.
How do I fix CVE-2017-1000118?
To fix CVE-2017-1000118, upgrade Akka HTTP to version 10.0.6 or later.
What version of Akka HTTP is affected by CVE-2017-1000118?
CVE-2017-1000118 affects Akka HTTP versions 10.0.5 and earlier.
What type of vulnerability is CVE-2017-1000118?
CVE-2017-1000118 is an application vulnerability that leads to a denial of service due to an illegal media range in the Accept header.
Can CVE-2017-1000118 be exploited remotely?
Yes, CVE-2017-1000118 can be exploited remotely by sending specially crafted requests to an affected Akka HTTP server.