CVE-2017-1000501

• 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "7.6.0"
                }
            ],
            "vendor_product": "awstats:awstats",
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "last_affected": "7.0"
                },
                {
                    "last_affected": "8.0"
                },
                {
                    "last_affected": "9.0"
                }
            ],
            "vendor_product": "debian:debian_linux",
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}

• http://www.awstats.org/
• https://lists.debian.org/debian-lts-announce/2018/01/msg00012.html
• https://security.gentoo.org/glsa/202007-37
• https://www.debian.org/security/2018/dsa-4092
• https://github.com/eldy/awstats/commit/06c0ab29c1e5059d9e0279c6b64d573d619e1651
• https://github.com/eldy/awstats/commit/cf219843a74c951bf5986f3a7fffa3dcf99c3899