Lucene search
F5F5:K17296065HistoryNov 28, 2022 - 12:00 a.m.
K17296065 : Apache mod_userdir vulnerability CVE-2016-4975
2022-11-2800:00:00
my.f5.com
18
apache
mod_userdir
vulnerability
http response splitting
cve-2016-4975
apache http server
Security Advisory Description
Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the “Location” or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31). (CVE-2016-4975)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
httpd
httpd
Apache Httpd < 2.2.32 : mod_userdir CRLF injection
2016-07-24 00:00:00
Apache Httpd < 2.4.25 : mod_userdir CRLF injection
2016-07-24 00:00:00
nuclei
nuclei
Apache mod_userdir CRLF injection
2021-09-30 19:35:17
debiancve
debiancve
CVE-2016-4975
2018-08-14 12:29:00
nvd
nvd
CVE-2016-4975
2018-08-14 12:29:00
openvas
openvas
Apache HTTP Server CRLF Injection Vulnerability (Dec 2016) - Linux
2021-11-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2815-2)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2554-1)
2021-04-19 00:00:00
cve
cve
CVE-2016-4975
2018-08-14 12:29:00
cvelist
cvelist
CVE-2016-4975 mod_userdir CRLF injection
2018-08-14 00:00:00
hackerone
hackerone
Internet Bug Bounty: mod_userdir CRLF injection (CVE-2016-4975)
2018-09-13 22:13:05
veracode
veracode
Privilege Escalation
2019-05-16 03:10:40
osv
osv
CVE-2016-4975
2018-08-14 12:29:00
redhatcve
redhatcve
CVE-2016-4975
2018-08-21 07:18:51
prion
prion
Crlf injection
2018-08-14 12:29:00
nessus
nessus
SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:2815-1)
2018-09-25 00:00:00
SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:2554-1)
2018-08-31 00:00:00
SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:2815-2)
2018-10-22 00:00:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2016-4975
2018-08-14 00:00:00
suse
suse
Security update for apache2 (moderate)
2018-09-25 15:13:20
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2017-04-13 10:59:52
redhat
redhat