High severity · published Mar 26, 2018
CVE-2017-15715
In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the…
8.1
CVSS
85.5%
EPSS
No
On KEV
Description
In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)85.5% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HTTP Server · Apache
2.4.0 through 2.4.29 · source: NVD
CD
Clustered Data Ontap · Netapp
All versions, or not specified · source: NVD
DL
Debian Linux · Debian
8.0; 9.0 · source: NVD
EL
Enterprise Linux · Redhat
6.0; 7.0; 7.4; 7.5; 7.6 · source: NVD
SC
Santricity Cloud Connector · Netapp
All versions, or not specified · source: NVD
SA
Storage Automation Store · Netapp
All versions, or not specified · source: NVD
ST
Storagegrid · Netapp
All versions, or not specified · source: NVD
UL
Ubuntu Linux · Canonical
14.04; 16.04; 17.10; 18.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-15715
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-15715
Mailing List
http://www.openwall.com/lists/oss-security/2018/03/24/6
Third Party Advisory
http://www.securityfocus.com/bid/103525
Third Party Advisory
http://www.securitytracker.com/id/1040570
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3558
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0366
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0367
More from HTTP Server
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
9.8
CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
9.1
CVE-2024-38475
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
9.0
CVE-2021-40438
mod_proxy SSRF
7.8
CVE-2019-0211
Apache HTTP Server Privilege Escalation Vulnerability