CVE-2016-2146

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of…

published April 15, 2016

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server deadlock, or memory consumption) via a large amount of POST data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03397 · 88.8th percentile
Published
2016-04-15T14:00Z
EPSS history
Timeline
  • 15 APR 14:00Z
    The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of…
    cvelistv5