CVE-2016-8612: Input Validation
First published: Fri Oct 21 2016(Updated: )
Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache Http Server | <2.4.23 | |
| Red Hat Enterprise Linux | =6.0 | |
| Red Hat Enterprise Linux | =7.0 | |
| NetApp Storage Automation Store |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-8612?
CVE-2016-8612 has a CVSS score indicating it is a medium severity vulnerability.
How do I fix CVE-2016-8612?
To fix CVE-2016-8612, update Apache HTTP Server to version 2.4.23 or later.
What systems are affected by CVE-2016-8612?
CVE-2016-8612 affects Apache HTTP Server versions prior to 2.4.23, along with specific versions of Red Hat Enterprise Linux and NetApp Storage Automation Store.
What is the nature of the vulnerability in CVE-2016-8612?
CVE-2016-8612 is caused by improper input validation in the protocol parsing logic of the mod_cluster load balancer.
What impact does CVE-2016-8612 have on affected systems?
CVE-2016-8612 can result in a segmentation fault, potentially leading to denial of service for the affected Apache HTTP Server.
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-8612
- agent/type
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/source
- vendor/apache
- canonical/apache http server
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/6.0
- version/red hat enterprise linux/7.0
- vendor/netapp
- canonical/netapp storage automation store