CVE-2016-4864

Name of the Vulnerable Software and Affected Versions H2O versions 2.0.3 and earlier H2O version 2.1.0-beta2 and earlier

Description The issue allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file. This can be achieved through various means such as fastcgi, mruby, proxy, redirect, or reproxy.

Recommendations For H2O versions 2.0.3 and earlier, update to a version later than 2.0.3 to resolve the issue. For H2O version 2.1.0-beta2 and earlier, update to a version later than 2.1.0-beta2 to resolve the issue.