Ask the Community
Groups
CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Connect IT Community | Kaseya
<main> <article class="userContent"> <h3 data-id="cve-id"><strong>CVE ID</strong></h3> <p>CVE-2017-3169</p> <h3 data-id="description"><strong>DESCRIPTION</strong></h3> <p>A NULL pointer dereference flaw was found in the httpd's mod_ssl module. A remote attacker could use this flaw to cause an httpd child process to crash if another module used by httpd called a certain API function during the processing of an HTTPS request.<br><br>Unitrends risk assessment: Medium, or None if current security update is applied</p> <h3 data-id="resolution"><strong>RESOLUTION</strong></h3> <p>For CentOS6, Unitrends security update dated 11/06/2017 or later has httpd-2.2.15-60.el6.centos.6 and this issue was fixed in httpd-2.2.15-60.el6.centos.5 / httpd-2.2.15-60.el6_9.5<br>For CentOS5, the system should be migrated to CentOS6.<br> </p> <h3 data-id="link-to-advisories"><strong>LINK TO ADVISORIES</strong></h3> <p></p> <ul><li><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Faccess.redhat.com%2Fsecurity%2Fcve%2Fcve-2017-3169%250D%250Ahttps%3A%2F%2Faccess.redhat.com%2Ferrata%2FRHSA-2017%3A2478">https://access.redhat.com/security/cve/cve-2017-3169 https://access.redhat.com/errata/RHSA-2017:2478</a></li></ul> </article> </main>