CVE-2016-2161CWE-823

In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for…

published July 27, 2017

CVSS
—
EPSS
21%
Percentile
97.5
In the wild
Unconfirmed
What it is

In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20952 · 97.5th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2017-07-27T21:00Z
EPSS history
Timeline
  • 27 JUL 21:00Z
    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for…
    cvelistv5