CVE-2017-7684: High severity Apache OpenMeetings vulnerability
Published Jul 14, 2017
·Updated
Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.
Affected Software
21 affected components
Apache OpenMeetings=1.0.0
Apache OpenMeetings=2.0
Apache OpenMeetings=2.1
Apache OpenMeetings=2.1.1
Apache OpenMeetings=2.2.0
Apache OpenMeetings=3.0.0
Apache OpenMeetings=3.0.1
Apache OpenMeetings=3.0.2
Apache OpenMeetings=3.0.3
Apache OpenMeetings=3.0.4
Apache OpenMeetings=3.0.5
Apache OpenMeetings=3.0.6
Apache OpenMeetings=3.0.7
Apache OpenMeetings=3.1.0
Apache OpenMeetings=3.1.1
Apache OpenMeetings=3.1.2
Apache OpenMeetings=3.1.3
Apache OpenMeetings=3.1.4
Apache OpenMeetings=3.1.5
Apache OpenMeetings=3.2.0
Apache OpenMeetings=3.2.1
Event History
Jul 14, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7684?
CVE-2017-7684 has a medium severity rating due to its potential to cause denial of service through file uploads.
2
How do I fix CVE-2017-7684?
To fix CVE-2017-7684, implement checks on the contents and size of uploaded files to prevent excessive resource usage.
3
Which versions of Apache OpenMeetings are affected by CVE-2017-7684?
CVE-2017-7684 affects Apache OpenMeetings versions 1.0.0 through 3.2.1.
4
What type of vulnerability is CVE-2017-7684?
CVE-2017-7684 is a denial of service vulnerability caused by improper upload handling.
5
Can CVE-2017-7684 be exploited remotely?
Yes, CVE-2017-7684 can be exploited remotely by an attacker who uploads large files to the server.