CVE-2016-4459: Buffer Overflow
Configuration of modcluster via JVMRoute longer than 80 characters will cause segfault.
A segmentation fault can occur in Apache HTTPD 2.2.
The crash is due to a strcpy buffer overflow in modcluster's modmanager.
https://github.com/modcluster/modcluster/blob/1.2.9.Final/native/modmanager/node.c#L227 [Open URL]
If clients send a request with a JVMRoute longer than 80 characters (the size of the strcpy destination), the strcpy segfaults.
Other sources
Stack-based buffer overflow in native/modmanager/node.c in modcluster 1.2.9.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4459?
CVE-2016-4459 has a high severity due to a stack-based buffer overflow that can lead to segmentation faults.
How do I fix CVE-2016-4459?
To fix CVE-2016-4459, upgrade mod_cluster to a version later than 1.2.9.
Which software is affected by CVE-2016-4459?
CVE-2016-4459 affects mod_cluster version 1.2.9 on Red Hat Enterprise Linux 6.0.
What causes the vulnerability CVE-2016-4459?
CVE-2016-4459 is caused by a strcpy buffer overflow in mod_cluster's mod_manager when JVMRoute configurations exceed 80 characters.
What is the potential impact of CVE-2016-4459?
The potential impact of CVE-2016-4459 includes application crashes and denial of service due to segmentation faults.