CVE-2016-4864
N/A
N/A
Summary
H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Kazuho Oku | H2O | versions 2.0.3 and earlier | affected |
| Kazuho Oku | H2O | versions 2.1.0-beta2 and earlier | affected |
Weaknesses
- Format String Vulnerability
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.