CVE-2016-8612

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-8612
Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2016-2957.html Third Party Advisory
http://www.securityfocus.com/bid/94939 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:0193 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:0194 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1387605 Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20180601-0005/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*
History

12 Feb 2023, 23:26

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2016-8612', 'name': 'https://access.redhat.com/security/cve/CVE-2016-8612', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2016:2957', 'name': 'https://access.redhat.com/errata/RHSA-2016:2957', 'tags': [], 'refsource': 'MISC'}
Summary An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process. Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.

02 Feb 2023, 21:17

Type Values Removed Values Added
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2016-8612 -
  • (MISC) https://access.redhat.com/errata/RHSA-2016:2957 -
Summary Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process. An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.
Information

Published : 2018-03-09 20:29

Updated : 2023-12-10 12:30

NVD link : CVE-2016-8612

Mitre link : CVE-2016-8612

CVE.ORG link : CVE-2016-8612

JSON object : View

Products Affected

redhat

  • enterprise_linux

apache

  • http_server

netapp

  • storage_automation_store
CWE
CWE-20

Improper Input Validation