CVEvulnerability
CVE-2017-5880
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Light versions before 6.5.2 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted GET request, aka SPL-130279.
Affected configurations
• splunk splunk 5.0.0
• splunk splunk 5.0.1
• splunk splunk 5.0.2
• splunk splunk 5.0.3
• splunk splunk 5.0.4
• splunk splunk 5.0.5
• splunk splunk 5.0.6
• splunk splunk 5.0.7
• splunk splunk 5.0.8
• splunk splunk 5.0.9
• splunk splunk 5.0.10
• splunk splunk 5.0.11
• splunk splunk 5.0.12
• splunk splunk 5.0.13
• splunk splunk 5.0.14
• splunk splunk 5.0.15
• splunk splunk 5.0.16
• splunk splunk 6.0.0
• splunk splunk 6.0.1
• splunk splunk 6.0.2
• splunk splunk 6.0.3
• splunk splunk 6.0.4
• splunk splunk 6.0.5
• splunk splunk 6.0.6
• splunk splunk 6.0.7
• splunk splunk 6.0.8
• splunk splunk 6.0.9
• splunk splunk 6.0.10
• splunk splunk 6.0.11
• splunk splunk 6.0.12
• splunk splunk 6.1.0
• splunk splunk 6.1.1
• splunk splunk 6.1.2
• splunk splunk 6.1.3
• splunk splunk 6.1.4
• splunk splunk 6.1.5
• splunk splunk 6.1.6
• splunk splunk 6.1.7
• splunk splunk 6.1.8
• splunk splunk 6.1.9
• splunk splunk 6.1.10
• splunk splunk 6.1.11
• splunk splunk 6.2.0
• splunk splunk 6.2.1
• splunk splunk 6.2.2
• splunk splunk 6.2.3
• splunk splunk 6.2.4
• splunk splunk 6.2.5
• splunk splunk 6.2.6
• splunk splunk 6.2.7
• splunk splunk 6.2.8
• splunk splunk 6.2.9
• splunk splunk 6.2.10
• splunk splunk 6.2.11
• splunk splunk 6.2.12
• splunk splunk 6.3.0
• splunk splunk 6.3.1
• splunk splunk 6.3.2
• splunk splunk 6.3.3
• splunk splunk 6.3.4
… and 12 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.splunk.com/view/SP-CAAAPW8 Patch, Vendor Advisory
- http://www.splunk.com/view/SP-CAAAPW8 Patch, Vendor Advisory