CVE-2017-5850: OpenBSD

High severity, CVSS 7.5. EPSS: 17.2% chance of exploitation in the next 30 days.

httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.

Affected products

• OpenBSD OpenBSD: version 6.0 only

Published 2017-03-27. Last modified 2026-06-17.