> ## Content Index
> Fetch the complete content index at: https://ryanbrooks.net/llms.txt
> Use this file to discover other available public pages before exploring further.

# New Apache Web Server bug can reveal server memory to attackers
- URL: https://ryanbrooks.net/new-apache-web-server-bug-can-reveal-server-memory-to-attackers/
- Published: 2017-09-20T03:10:55.000Z
- Updated: 2017-09-20T03:10:55.000Z
- Author: Ryan Brooks
- Tags: Security, #wp, #wp-post, #Import 2026-07-17 22:34

Another day, another vulnerability in a widely-used software package. Today's bug (dubbed [Optionsbleed](https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html?ref=ryanbrooks.net) by Hanno Böck, the journalist who documented the vulnerability) can reveal passwords and other pieces of vital information to attackers. While not as big of a threat as Heartbleed, a similar bug which allowed attackers to snag private encryption keys for servers (which is a Bad Thing, since this is how servers verify they are who they say they are; for an explanation of how this works, see my [Asymmetric Encryption explanation](https://ryanbrooks.net/what-is-asymmetric-cryptography/) from last year), this should still be regarded as a significant threat.

Patches are being rolled out now; patch your systems if you haven't already.