What’s Vulnerable › Vulnerabilities

CVE-2017-12171

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-26 · updated 2026-06-17
• Weakness: CWE-284

Description

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

Affected products

• Apache HTTP Server: 2.2.15-60
• Red Hat Enterprise Linux: 6.9
• RedHat Enterprise Linux Desktop: 6.0
• RedHat Enterprise Linux Server: 6.0
• RedHat Enterprise Linux Workstation: 6.0

References

• http://www.securityfocus.com/bid/101516
• http://www.securitytracker.com/id/1039633
• https://access.redhat.com/errata/RHSA-2017:2972
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171
• http://www.securityfocus.com/bid/101516
• http://www.securitytracker.com/id/1039633
• https://access.redhat.com/errata/RHSA-2017:2972
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171

Get alerted when CVE-2017-12171 or the next vulnerability affects your stack