CVE-2016-2145

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote…

published April 15, 2016

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmentation fault and process crash) via a crafted POST data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03065 · 87.4th percentile
Published
2016-04-15T14:00Z
EPSS history
Timeline
  • 15 APR 14:00Z
    The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote…
    cvelistv5