Lucene search
F5F5:K32071141HistoryDec 09, 2016 - 12:00 a.m.
K32071141 : Apache mod_http2 vulnerability CVE-2016-8740
2016-12-0900:00:00
my.f5.com
28
Security Advisory Description
The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request. (CVE-2016-8740)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
httpd
httpd
Apache Httpd < 2.4.25 : HTTP/2 CONTINUATION denial of service
2016-11-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:0203-1)
2021-04-19 00:00:00
Apache HTTP Server 'mod_http2' Denial of Service Vulnerability - Linux
2016-12-06 00:00:00
Fedora Update for httpd FEDORA-2016-b39fedec11
2016-12-12 00:00:00
nessus
nessus
Fedora 24 : httpd (2016-b39fedec11)
2016-12-12 00:00:00
openSUSE Security Update : apache2 (openSUSE-2017-154)
2017-01-30 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: httpd-2.4.23-5.fc25
2016-12-08 18:24:00
[SECURITY] Fedora 24 Update: httpd-2.4.23-5.fc24
2016-12-11 02:28:25
exploitpack
exploitpack
Apache 2.4.23 mod_http2 - Denial of Service
2016-12-12 00:00:00
freebsd
freebsd
Apache httpd -- denial of service in HTTP/2
2016-12-06 00:00:00
Apache httpd -- several vulnerabilities
2016-12-20 00:00:00
ubuntucve
ubuntucve
CVE-2016-8740
2016-12-05 00:00:00
redhatcve
redhatcve
CVE-2016-8740
2016-12-05 14:17:43
debiancve
debiancve
CVE-2016-8740
2016-12-05 19:59:00
nvd
nvd
CVE-2016-8740
2016-12-05 19:59:00
kaspersky
kaspersky
KLA10907 Denial of service vulnerability in Apache HTTP Server
2016-12-05 00:00:00
prion
prion
Cross site request forgery (csrf)
2016-12-05 19:59:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:10:16
cve
cve
CVE-2016-8740
2016-12-05 19:59:00
cvelist
cvelist
CVE-2016-8740
2016-12-05 19:00:00
exploitdb
exploitdb
Apache 2.4.23 mod_http2 - Denial of Service
2016-12-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
slackware
slackware
[slackware-security] httpd
2016-12-24 01:35:08
redhat
redhat
gentoo
gentoo
Apache: Multiple vulnerabilities
2017-01-15 00:00:00
apple
apple
About the security content of macOS High Sierra 10.13
2017-09-25 00:00:00
About the security content of macOS High Sierra 10.13 - Apple Support
2020-02-06 07:51:09