CVE-2017-5880

Published: Feb 4, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Light versions before 6.5.2 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted GET request, aka SPL-130279.

Affected (72)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

71 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 5.0.0
Splunk Splunk	Version 5.0.10
Splunk Splunk	Version 5.0.11
Splunk Splunk	Version 5.0.12
Splunk Splunk	Version 5.0.13
Splunk Splunk	Version 5.0.14
Splunk Splunk	Version 5.0.15
Splunk Splunk	Version 5.0.16
Splunk Splunk	Version 5.0.1
Splunk Splunk	Version 5.0.2
Splunk Splunk	Version 5.0.3
Splunk Splunk	Version 5.0.4
Splunk Splunk	Version 5.0.5
Splunk Splunk	Version 5.0.6
Splunk Splunk	Version 5.0.7
Splunk Splunk	Version 5.0.8
Splunk Splunk	Version 5.0.9
Splunk Splunk	Version 6.0.0
Splunk Splunk	Version 6.0.10
Splunk Splunk	Version 6.0.11
Splunk Splunk	Version 6.0.12
Splunk Splunk	Version 6.0.1
Splunk Splunk	Version 6.0.2
Splunk Splunk	Version 6.0.3
Splunk Splunk	Version 6.0.4
Splunk Splunk	Version 6.0.5
Splunk Splunk	Version 6.0.6
Splunk Splunk	Version 6.0.7
Splunk Splunk	Version 6.0.8
Splunk Splunk	Version 6.0.9
Splunk Splunk	Version 6.1.0
Splunk Splunk	Version 6.1.10
Splunk Splunk	Version 6.1.11
Splunk Splunk	Version 6.1.1
Splunk Splunk	Version 6.1.2
Splunk Splunk	Version 6.1.3
Splunk Splunk	Version 6.1.4
Splunk Splunk	Version 6.1.5
Splunk Splunk	Version 6.1.6
Splunk Splunk	Version 6.1.7
Splunk Splunk	Version 6.1.8
Splunk Splunk	Version 6.1.9
Splunk Splunk	Version 6.2.0
Splunk Splunk	Version 6.2.10
Splunk Splunk	Version 6.2.11
Splunk Splunk	Version 6.2.12
Splunk Splunk	Version 6.2.1
Splunk Splunk	Version 6.2.2
Splunk Splunk	Version 6.2.3
Splunk Splunk	Version 6.2.4
Splunk Splunk	Version 6.2.5
Splunk Splunk	Version 6.2.6
Splunk Splunk	Version 6.2.7
Splunk Splunk	Version 6.2.8
Splunk Splunk	Version 6.2.9
Splunk Splunk	Version 6.3.0
Splunk Splunk	Version 6.3.1
Splunk Splunk	Version 6.3.2
Splunk Splunk	Version 6.3.3
Splunk Splunk	Version 6.3.4
Splunk Splunk	Version 6.3.5
Splunk Splunk	Version 6.3.6
Splunk Splunk	Version 6.3.7
Splunk Splunk	Version 6.3.8
Splunk Splunk	Version 6.4.0
Splunk Splunk	Version 6.4.1
Splunk Splunk	Version 6.4.2
Splunk Splunk	Version 6.4.3
Splunk Splunk	Version 6.4.4
Splunk Splunk	Version 6.5.0
Splunk Splunk	Version 6.5.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Up to 6.5.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www.splunk.com/view/SP-CAAAPW8

Source: cve@mitre.org

PatchVendor Advisory

http://www.splunk.com/view/SP-CAAAPW8

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.