mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
|
History
21 Nov 2024, 02:49
Type | Values Removed | Values Added |
---|---|---|
References | () http://rhn.redhat.com/errata/RHSA-2016-1648.html - Vendor Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2016-1649.html - Vendor Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2016-1650.html - Broken Link | |
References | () http://rhn.redhat.com/errata/RHSA-2016-2054.html - Vendor Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2016-2055.html - Vendor Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2016-2056.html - Broken Link | |
References | () http://www.securityfocus.com/bid/92584 - Third Party Advisory, VDB Entry | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=1326320 - Issue Tracking | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6JMA2YLPK6SEUVF5Q3QEANHYEPRZA2RI/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CX5QNNIVAUB2VVDV6TR3YMFTL6VRKOBO/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HE5YZTBZRXCMQFT5LDLZG2HAYBKMYQLL/ - |
Information
Published : 2016-09-26 14:59
Updated : 2024-11-21 02:49
NVD link : CVE-2016-3110
Mitre link : CVE-2016-3110
CVE.ORG link : CVE-2016-3110
JSON object : View
Products Affected
redhat
- jboss_enterprise_application_platform
- enterprise_linux
- jboss_enterprise_web_server
fedoraproject
- fedora
CWE
CWE-20
Improper Input Validation