{"schemaVersion":3,"id":"CVE-2017-7657","aliases":["UBUNTU-CVE-2017-7657","DEBIAN-CVE-2017-7657","CGA-2v88-hm9j-j37c","CGA-5gw4-33hv-529f","CGA-6637-r4c7-wghh","CGA-93c7-h8q6-whmc","CGA-c6fg-c2h7-jwg9","CGA-hgrv-3wrp-cwfq","CGA-hpqw-q3pr-3f58","CGA-j3cj-4xjc-q4qw","CGA-m62q-p3g3-vv4c","CGA-mxp9-gvvf-r7q9","CGA-p78x-wm33-c7rj","GHSA-vgg8-72f2-qm23","CGA-vhf9-jjqf-pmpr","CGA-wc35-x2j8-6f4j","CGA-xcch-v426-mmcv"],"status":"published","duplicateOf":null,"title":null,"description":"In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.","dates":{"published":"2018-06-26T16:00:00.000Z","modified":"2024-08-05T16:12:27.850Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":0.14879,"percentile":0.96669,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.14879},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.14879,"percentile":0.96669}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.14879,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.14879,"percentile":0.96669}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","description":"The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/444.html"},{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.5","name":"hadoop-fips-3.5","label":"hadoop-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/jetty9","purlType":"deb","versions":[{"text":"< 9.2.25-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.25-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"jetty8","name":"jetty8","label":"jetty8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"eclipse","product":"jetty","name":"jetty","label":"jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 9.2.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.3.0, < 9.3.24","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.4.0, < 9.4.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 9.2.26 | ≥ 9.3.0, < 9.3.24 | ≥ 9.4.0, < 9.4.11","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"eclipse-jetty","label":"Eclipse Jetty","category":"server-app"}},"hubHref":"/vendor/eclipse/jetty"},{"vendor":"hp","product":"xp_p9000_command_view","name":"xp p9000 command view","label":"xp_p9000_command_view","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.4.0-00, < 8.6.2-00","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.4.0-00, < 8.6.2-00","eol":null,"hubHref":"/vendor/hp/xp_p9000_command_view"},{"vendor":"org.eclipse.jetty","product":"jetty-server","name":"org.eclipse.jetty:jetty-server","label":"jetty-server","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.jetty/jetty-server","purlType":"maven","versions":[{"text":"< 9.2.25.v20180606","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.3.0, < 9.3.24.v20180605","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.25.v20180606 | ≥ 9.3.0, < 9.3.24.v20180605","eol":null,"hubHref":null},{"vendor":"netapp","product":"e-series_santricity_management","name":"e-series santricity management","label":"e-series_santricity_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/e-series_santricity_management"},{"vendor":"netapp","product":"e-series_santricity_os_controller","name":"e-series santricity os controller","label":"e-series_santricity_os_controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 11.0, ≤ 11.50.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 11.0, ≤ 11.50.1","eol":null,"hubHref":"/vendor/netapp/e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_web_services","name":"e-series santricity web services","label":"e-series_santricity_web_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/e-series_santricity_web_services"},{"vendor":"netapp","product":"element_software","name":"element software","label":"element_software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/element_software"},{"vendor":"netapp","product":"element_software_management_node","name":"element software management node","label":"element_software_management_node","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/element_software_management_node"},{"vendor":"netapp","product":"hci_storage_nodes","name":"hci storage nodes","label":"hci_storage_nodes","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/hci_storage_nodes"},{"vendor":"netapp","product":"oncommand_system_manager","name":"oncommand system manager","label":"oncommand_system_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.x","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.x","eol":null,"hubHref":"/vendor/netapp/oncommand_system_manager"},{"vendor":"netapp","product":"oncommand_unified_manager","name":"oncommand unified manager","label":"oncommand_unified_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.4","eol":null,"hubHref":"/vendor/netapp/oncommand_unified_manager"},{"vendor":"netapp","product":"santricity_cloud_connector","name":"santricity cloud connector","label":"santricity_cloud_connector","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/santricity_cloud_connector"},{"vendor":"netapp","product":"snap_creator_framework","name":"snap creator framework","label":"snap_creator_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.3","eol":null,"hubHref":"/vendor/netapp/snap_creator_framework"},{"vendor":"netapp","product":"snapcenter","name":"snapcenter","label":"snapcenter","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.1p3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1p3","eol":null,"hubHref":"/vendor/netapp/snapcenter"},{"vendor":"netapp","product":"snapmanager","name":"snapmanager","label":"snapmanager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.2","eol":null,"hubHref":"/vendor/netapp/snapmanager"},{"vendor":"oracle","product":"rest_data_services","name":"rest data services","label":"rest_data_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.2.0.4","noFixRecorded":false,"fixedIn":null},{"text":"12.1.0.2","noFixRecorded":false,"fixedIn":null},{"text":"12.2.0.1","noFixRecorded":false,"fixedIn":null},{"text":"18c","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.2.0.4 | 12.1.0.2 | 12.2.0.1 | 18c","eol":null,"hubHref":"/vendor/oracle/rest_data_services"},{"vendor":"oracle","product":"retail_xstore_point_of_service","name":"retail xstore point of service","label":"retail_xstore_point_of_service","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.1","noFixRecorded":false,"fixedIn":null},{"text":"15.0","noFixRecorded":false,"fixedIn":null},{"text":"16.0","noFixRecorded":false,"fixedIn":null},{"text":"17.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.1 | 15.0 | 16.0 | 17.0","eol":null,"hubHref":"/vendor/oracle/retail_xstore_point_of_service"},{"vendor":"the eclipse foundation","product":"eclipse jetty","name":"Eclipse Jetty","label":"eclipse jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 9.2.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.3.0, < unspecified","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, < 9.3.24","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.4.0, < unspecified","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, < 9.4.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 9.2.0 | ≥ 9.3.0, < unspecified | ≥ unspecified, < 9.3.24 | ≥ 9.4.0, < unspecified | ≥ unspecified, < 9.4.11","eol":null,"hubHref":"/vendor/the_eclipse_foundation/eclipse_jetty"}],"affectedCount":25,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://www.debian.org/security/2018/dsa-4278","label":"www.debian.org/security/2018/dsa-4278","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory","Advisory","WEB"]},{"url":"http://www.securitytracker.com/id/1041194","label":"www.securitytracker.com/id/1041194","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory","Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0910","label":"access.redhat.com/errata/RHSA-2019:0910","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory","Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","label":"www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Patch","Third Party Advisory","FIX","WEB"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"www.oracle.com/security-alerts/cpuoct2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Patch","Third Party Advisory","FIX","WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20181014-0001/","label":"security.netapp.com/advisory/ntap-20181014-0001/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory","FIX"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us","label":"support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us","hostname":"support.hpe.com","tags":["X Refsource CONFIRM","Third Party Advisory","Advisory","WEB"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=535668","label":"bugs.eclipse.org/bugs/show_bug.cgi?id=535668","hostname":"bugs.eclipse.org","tags":["X Refsource CONFIRM","Third Party Advisory","REPORT","Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574%40%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8%40%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae%40%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"www.oracle.com//security-alerts/cpujul2021.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB"]},{"url":"https://ubuntu.com/security/CVE-2017-7657","label":"ubuntu.com/security/CVE-2017-7657","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7657","label":"www.cve.org/CVERecord?id=CVE-2017-7657","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7657","label":"security-tracker.debian.org/tracker/CVE-2017-7657","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7657","label":"nvd.nist.gov/vuln/detail/CVE-2017-7657","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/advisories/GHSA-vgg8-72f2-qm23","label":"github.com/advisories/GHSA-vgg8-72f2-qm23","hostname":"github.com","tags":["Advisory"]},{"url":"https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8@%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae@%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574@%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20181014-0001","label":"security.netapp.com/advisory/ntap-20181014-0001","hostname":"security.netapp.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["DSA-4278-1"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-06-26T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T16:12:27.850Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:11:25.671Z","stale":false,"partial":false}}