Lucene search
Redhat.comRH:CVE-2016-8740HistoryDec 05, 2016 - 2:17 p.m.
CVE-2016-8740
2016-12-0514:17:43
redhat.com
access.redhat.com
16
0.027 Low
EPSS
Percentile
90.5%
A vulnerability was found in httpd’s handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server’s available memory, causing httpd to crash.
Mitigation
As a temporary workaround - HTTP/2 can be disabled by changing
the configuration by removing h2 and h2c from the Protocols
line(s) in the configuration file.
The resulting line should read:
Protocols http/1.1
Related
fedora
fedora
[SECURITY] Fedora 24 Update: httpd-2.4.23-5.fc24
2016-12-11 02:28:25
[SECURITY] Fedora 25 Update: httpd-2.4.23-5.fc25
2016-12-08 18:24:00
openvas
openvas
Fedora Update for httpd FEDORA-2016-b39fedec11
2016-12-12 00:00:00
Apache HTTP Server 'mod_http2' Denial of Service Vulnerability - Linux
2016-12-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0203-1)
2021-04-19 00:00:00
nessus
nessus
FreeBSD : Apache httpd -- denial of service in HTTP/2 (cb0bf1ec-bb92-11e6-a9a5-b499baebfeaf)
2016-12-07 00:00:00
SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:0203-1)
2017-01-20 00:00:00
openSUSE Security Update : apache2 (openSUSE-2017-154)
2017-01-30 00:00:00
nvd
nvd
CVE-2016-8740
2016-12-05 19:59:00
debiancve
debiancve
CVE-2016-8740
2016-12-05 19:59:00
f5
f5
K32071141 : Apache mod_http2 vulnerability CVE-2016-8740
2016-12-09 00:00:00
exploitpack
exploitpack
Apache 2.4.23 mod_http2 - Denial of Service
2016-12-12 00:00:00
freebsd
freebsd
Apache httpd -- denial of service in HTTP/2
2016-12-06 00:00:00
Apache httpd -- several vulnerabilities
2016-12-20 00:00:00
ubuntucve
ubuntucve
CVE-2016-8740
2016-12-05 00:00:00
httpd
httpd
Apache Httpd < 2.4.25 : HTTP/2 CONTINUATION denial of service
2016-11-22 00:00:00
prion
prion
Cross site request forgery (csrf)
2016-12-05 19:59:00
kaspersky
kaspersky
KLA10907 Denial of service vulnerability in Apache HTTP Server
2016-12-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:10:16
cve
cve
CVE-2016-8740
2016-12-05 19:59:00
cvelist
cvelist
CVE-2016-8740
2016-12-05 19:00:00
exploitdb
exploitdb
Apache 2.4.23 mod_http2 - Denial of Service
2016-12-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
slackware
slackware
[slackware-security] httpd
2016-12-24 01:35:08
redhat
redhat
gentoo
gentoo
Apache: Multiple vulnerabilities
2017-01-15 00:00:00
apple
apple
About the security content of macOS High Sierra 10.13
2017-09-25 00:00:00
About the security content of macOS High Sierra 10.13 - Apple Support
2020-02-06 07:51:09