CVE Vulnerabilities

CVE-2017-10872

Incorrect Access of Indexable Resource ('Range Error')

Published: Dec 22, 2017 | Modified: Apr 19, 2021
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.

Weakness

The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

Affected Software

Name Vendor Start Version End Version
H2o Dena * 2.2.3 (including)
H2o Ubuntu upstream *

References