CVE-2017-5850: High severity OpenBSD OpenBSD vulnerability
Published Mar 27, 2017
·Updated
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.
Affected Software
1 affected component
OpenBSD OpenBSD=6.0
Remediation
Patch Available
Event History
Mar 27, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5850?
CVE-2017-5850 has been classified as a high severity vulnerability due to its potential to cause denial of service through memory consumption.
2
How do I fix CVE-2017-5850?
To fix CVE-2017-5850, update to OpenBSD version 6.1 or later, which addresses this vulnerability.
3
What is the impact of CVE-2017-5850 on my system?
The impact of CVE-2017-5850 is a denial of service, which can lead to server unavailability when exploited.
4
Who is affected by CVE-2017-5850?
CVE-2017-5850 affects OpenBSD version 6.0, which is susceptible to remote attackers exploiting memory consumption.
5
Is CVE-2017-5850 exploitable remotely?
Yes, CVE-2017-5850 is exploitable remotely, allowing attackers to send crafted HTTP requests to impact server performance.