CVE-2017-1000118

High

Published: 05/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Akka HTTP versions up to 10.0.5 contain a flaw related to illegal media range in the Accept header, leading to StackOverflowError. This can result in denial of service.

Risk Assessment

Organizations using vulnerable versions of Akka HTTP may experience service outages, impacting their operations and reputation.

Recommendation

It is recommended to upgrade Akka HTTP to a version newer than 10.0.5 to mitigate this vulnerability.

Other vulnerabilities in Akka HTTP

CVE-2023-33251Medium
Versions of Akka HTTP before 10.5.2 have a problem with the permissions of temporary files created during file uploads. These files have weak permissions, allowing other users to read them on Linux and UNIX systems.

Original NVD description (English source)

Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service

Vulnerability data from NVD (NIST) · CISA KEV · EPSS