Internet Bug Bounty · Report #269568
Optionsbleed / CVE-2017-9798
Validstatus
lowseverity
$100bounty
8upvotes
3 May 2018disclosed
How it was found
Bug has been disclosed here: https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html
poc code: https://github.com/hannob/optionsbleed
Apache is currently preparing 2.4.28, which will contain the fix, a patch is available in their svn repo.