CVE-2017-17562

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0.

• http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlPatch, Third Party Advisory
• http://www.securitytracker.com/id/1040702Broken Link, Third Party Advisory, VDB Entry
• https://github.com/elttam/advisories/tree/master/CVE-2017-17562Broken Link, Third Party Advisory
• https://github.com/embedthis/goahead/commit/6f786c123196eb622625a920d54048629a7caa74Broken Link, Patch, Third Party Advisory
• https://github.com/embedthis/goahead/issues/249Broken Link, Issue Tracking, Third Party Advisory
• https://www.elttam.com.au/blog/goahead/Broken Link, Exploit, Patch, Third Party Advisory
• https://www.exploit-db.com/exploits/43360/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/43877/Exploit, Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlPatch, Third Party Advisory
• http://www.securitytracker.com/id/1040702Broken Link, Third Party Advisory, VDB Entry
• https://github.com/elttam/advisories/tree/master/CVE-2017-17562Broken Link, Third Party Advisory
• https://github.com/embedthis/goahead/commit/6f786c123196eb622625a920d54048629a7caa74Broken Link, Patch, Third Party Advisory
• https://github.com/embedthis/goahead/issues/249Broken Link, Issue Tracking, Third Party Advisory
• https://www.elttam.com.au/blog/goahead/Broken Link, Exploit, Patch, Third Party Advisory
• https://www.exploit-db.com/exploits/43360/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/43877/Exploit, Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-17562US Government Resource

Published

Dec 12, 2017

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17556A debug tool in Synaptics TouchPad drivers allows local user…
• CVE-2017-17557In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, …
• CVE-2017-17558The usb_destroy_configuration function in drivers/usb/core/c…
• CVE-2017-1756IBM Business Process Manager 8.6 allows web pages to be stor…4
• CVE-2017-17560An issue was discovered on Western Digital MyCloud PR4100 2.…
• CVE-2017-17561SeaCMS 6.56 allows remote authenticated administrators to ex…
• CVE-2017-17563An issue was discovered in Xen through 4.9.x allowing guest …
• CVE-2017-17564An issue was discovered in Xen through 4.9.x allowing guest …
• CVE-2017-17565An issue was discovered in Xen through 4.9.x allowing PV gue…
• CVE-2017-17566An issue was discovered in Xen through 4.9.x allowing PV gue…
• CVE-2017-17567Scubez Posty Readymade Classifieds has SQL Injection via the…
• CVE-2017-17568Scubez Posty Readymade Classifieds has Incorrect Access Cont…