CVE-2017-17663: Buffer Overflow
Published Feb 6, 2018
·Updated
The htpasswd implementation of minihttpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.
Affected Software
2 affected components
ACME Mini Httpd<1.28
ACME Thttpd<2.28
Event History
Feb 6, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Jun 23, 2025
News Published
via The Register·11:45 PM
News Published
via The Register·11:48 PM
Frequently Asked Questions
1
What is the severity of CVE-2017-17663?
CVE-2017-17663 has a high severity level due to the potential for remote code execution.
2
How do I fix CVE-2017-17663?
To fix CVE-2017-17663, upgrade your mini_httpd to version 1.28 or thttpd to version 2.28 or later.
3
What systems are affected by CVE-2017-17663?
CVE-2017-17663 affects mini_httpd versions prior to 1.28 and thttpd versions prior to 2.28.
4
Can CVE-2017-17663 be exploited remotely?
Yes, CVE-2017-17663 can be exploited remotely due to the buffer overflow vulnerability.
5
What happens if CVE-2017-17663 is exploited?
If exploited, CVE-2017-17663 could allow an attacker to execute arbitrary code on the affected server.