System	Score	Found at
cvssv3	5.9	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json
epss	0.93868	https://api.first.org/data/v1/epss?cve=CVE-2017-9798
epss	0.93868	https://api.first.org/data/v1/epss?cve=CVE-2017-9798
epss	0.93868	https://api.first.org/data/v1/epss?cve=CVE-2017-9798
epss	0.93868	https://api.first.org/data/v1/epss?cve=CVE-2017-9798
epss	0.93881	https://api.first.org/data/v1/epss?cve=CVE-2017-9798
cvssv2	5	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3	5.9	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
apache_httpd	low	https://httpd.apache.org/security/json/CVE-2017-9798.json
archlinux	High	https://security.archlinux.org/AVG-404

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json
		https://api.first.org/data/v1/epss?cve=CVE-2017-9798
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1490344		https://bugzilla.redhat.com/show_bug.cgi?id=1490344
876109		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876109
ASA-201709-15		https://security.archlinux.org/ASA-201709-15
AVG-404		https://security.archlinux.org/AVG-404
CVE-2017-9798		https://httpd.apache.org/security/json/CVE-2017-9798.json
CVE-2017-9798;OPTIONSBLEED	Exploit	https://github.com/hannob/optionsbleed/blob/e297ce13cfb0f338b2cabfb81a70349fd6925f82/optionsbleed
CVE-2017-9798;OPTIONSBLEED	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/42745.py
RHSA-2017:2882		https://access.redhat.com/errata/RHSA-2017:2882
RHSA-2017:2972		https://access.redhat.com/errata/RHSA-2017:2972
RHSA-2017:3018		https://access.redhat.com/errata/RHSA-2017:3018
RHSA-2017:3193		https://access.redhat.com/errata/RHSA-2017:3193
RHSA-2017:3194		https://access.redhat.com/errata/RHSA-2017:3194
RHSA-2017:3195		https://access.redhat.com/errata/RHSA-2017:3195
RHSA-2017:3239		https://access.redhat.com/errata/RHSA-2017:3239
RHSA-2017:3240		https://access.redhat.com/errata/RHSA-2017:3240
RHSA-2017:3475		https://access.redhat.com/errata/RHSA-2017:3475
RHSA-2017:3476		https://access.redhat.com/errata/RHSA-2017:3476
RHSA-2017:3477		https://access.redhat.com/errata/RHSA-2017:3477
USN-3425-1		https://usn.ubuntu.com/3425-1/
USN-3425-2		https://usn.ubuntu.com/3425-2/

Data source	Metasploit
Description	This module scans for the Apache optionsbleed vulnerability where the Allow response header returned from an OPTIONS request may bleed memory if the server has a .htaccess file with an invalid Limit method defined.
Note	AKA: - Optionsbleed Stability: - unknown-stability Reliability: - unknown-reliability SideEffects: - unknown-side-effects
Ransomware campaign use	Unknown
Source publication date	Sept. 18, 2017
Source URL	https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/http/apache_optionsbleed.rb

Data source	Exploit-DB
Date added	Sept. 18, 2017
Description	Apache < 2.2.34 / < 2.4.27 - OPTIONS Memory Leak
Ransomware campaign use	Unknown
Source publication date	Sept. 18, 2017
Exploit type	webapps
Platform	linux
Source update date	Sept. 19, 2017
Source URL	https://github.com/hannob/optionsbleed/blob/e297ce13cfb0f338b2cabfb81a70349fd6925f82/optionsbleed

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.99861
EPSS Score	0.93868
Published At	Aug. 15, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T08:28:33.901903+00:00	Alpine Linux Importer	Import	https://secdb.alpinelinux.org/edge/main.json	37.0.0