CVE-2016-7835

Опубликовано: 09 июн. 2017

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.

Ссылки

http://www.securityfocus.com/bid/95061
Third Party Advisory
VDB Entry
https://github.com/h2o/h2o/issues/1144
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN44566208/index.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/95061
Third Party Advisory
VDB Entry
https://github.com/h2o/h2o/issues/1144
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN44566208/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*

Версия до 2.0.4 (включая)

cpe:2.3:a:h2o_project:h2o:2.1.0:beta3:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03157

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2016-7835

CVSS3: 9.1

debian

больше 8 лет назад

Use-after-free vulnerability in H2O allows remote attackers to cause a ...

GHSA-p8m4-qhm5-5gm6

CVSS3: 9.1

github

больше 3 лет назад

Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.

EPSS

Процентиль: 87%

0.03157

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-416