PT-2017-8561
CVE-2016-4864
·
تاريخ النشر
2017-05-12
·
تاريخ التحديث
2019-02-26
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
H2O versions 2.0.3 and earlier
H2O version 2.1.0-beta2 and earlier
Description
The issue allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file. This can be achieved through various means such as fastcgi, mruby, proxy, redirect, or reproxy.
Recommendations
For H2O versions 2.0.3 and earlier, update to a version later than 2.0.3 to resolve the issue.
For H2O version 2.1.0-beta2 and earlier, update to a version later than 2.1.0-beta2 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾