CVE:CVE-2017-15710
CNNVD:CNNVD-201710-1016
Apache httpd是美国阿帕奇（Apache）软件基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。
Apache httpd 2.0.23版本至2.0.65版本、2.2.0版本至2.2.34和2.4.0版本至2.4.29版本中的mod_authnz_ldap存在安全漏洞。攻击者可利用该漏洞造成拒绝服务（崩溃和越边界写入）。
solution:Upgrade apache http_server to a higher version than 2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.9,2.4.10,2.4.12,2.4.16,2.4.17,2.4.18,2.4.20,2.4.23,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29,and avoid the version 2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.9,2.4.10,2.4.12,2.4.16,2.4.17,2.4.18,2.4.20,2.4.23,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,and avoid the version 12.04,14.04,16.04,17.10,18.04; Upgrade netapp santricity_cloud_connector to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade netapp storagegrid to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,7.4,7.5,7.6,and avoid the version 6.0,7.0,7.4,7.5,7.6