Skip to content
OpenAdvisories
Unscored CVE-2016-4864 EUVD-2016-5844GHSA-h4xp-827w-ffh7

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string spe…

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Kazuho Oku Product: H2O

Description

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.

Affected products

VendorProductAffectedFixed
Kazuho Oku H2O versions 2.0.3 and earlier, versions 2.1.0-beta2 and earlier —

References