UpHeron
All vulnerabilities

Servers and applications

CVE-2017-3169

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.

Severity
Critical 9.8
Published
20 Jun 2017
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Version 2.4.25
  • Version 2.4.23
  • Version 2.4.20
  • Version 2.4.18
All 34 release lines
  • Version 2.2.0
  • Version 2.2.2
  • Version 2.2.3
  • Version 2.2.11
  • Version 2.2.12
  • Version 2.2.13
  • Version 2.2.14
  • Version 2.2.15
  • Version 2.2.16
  • Version 2.2.17
  • Version 2.2.18
  • Version 2.2.19
  • Version 2.2.20
  • Version 2.2.21
  • Version 2.2.22
  • Version 2.2.23
  • Version 2.2.24
  • Version 2.2.25
  • Version 2.2.26
  • Version 2.2.27
  • Version 2.2.29
  • Version 2.2.30
  • Version 2.2.31
  • Version 2.2.32
  • Version 2.4.1
  • Version 2.4.2
  • Version 2.4.10
  • Version 2.4.12
  • Version 2.4.16
  • Version 2.4.17
  • Version 2.4.18
  • Version 2.4.20
  • Version 2.4.23
  • Version 2.4.25

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-3169
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-3169