CVE-2017-9798

CVE-2017-9798, known as Optionsbleed, is a use-after-free vulnerability affecting Apache HTTP Server versions through 2.2.34 and 2.4.x through 2.4.27. This flaw allows remote, unauthenticated attackers to read secret data from process memory under specific misconfigurations, such as when the Limit directive can be set in a user's .htaccess file. Rated 7.5 HIGH on the CVSS scale, the vulnerability has a low attack complexity and can lead to a complete compromise of confidentiality, as sensitive information may be leaked. While not listed on CISA's KEV catalog, exploit intelligence indicates public Metasploit modules and ExploitDB entries exist, and it has garnered significant community discussion and media coverage, suggesting active interest in its exploitation.