Security Advisory

CVE-2016-4864

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-12 18:00:00
Last updated 2024-08-06 00:46:38
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.