What is the severity of CVE-2016-9564?

CVE-2016-9564 is categorized as a high-severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2016-9564?

To mitigate CVE-2016-9564, you should upgrade the Boa Webserver to a version that does not contain this vulnerability.

What type of attack does CVE-2016-9564 allow?

CVE-2016-9564 allows remote attackers to cause denial of service through a crafted HTTP GET request.

Which versions of Boa Webserver are affected by CVE-2016-9564?

CVE-2016-9564 specifically affects Boa Webserver version 0.92r.

What kind of exploit is CVE-2016-9564 related to?

CVE-2016-9564 is related to a buffer overflow exploit triggered by long URIs composed of '/' and '.' characters.

Vulnerability/
CVE-2016-9564

high

7.5

CWE

20 119

30/11/2016

6/8/2024

CVE-2016-9564: Input Validation

First published: Wed Nov 30 2016(Updated: )

Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Boa Boa	=0.92r
	=0.92r

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-9564?
CVE-2016-9564 is categorized as a high-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2016-9564?
To mitigate CVE-2016-9564, you should upgrade the Boa Webserver to a version that does not contain this vulnerability.
What type of attack does CVE-2016-9564 allow?
CVE-2016-9564 allows remote attackers to cause denial of service through a crafted HTTP GET request.
Which versions of Boa Webserver are affected by CVE-2016-9564?
CVE-2016-9564 specifically affects Boa Webserver version 0.92r.
What kind of exploit is CVE-2016-9564 related to?
CVE-2016-9564 is related to a buffer overflow exploit triggered by long URIs composed of '/' and '.' characters.

collector/nvd-index
agent/weakness
agent/references
agent/type
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/severity
agent/author
agent/softwarecombine
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/tags
agent/first-publish-date
agent/event
agent/source
vendor/boa
canonical/boa boa
version/boa boa/0.92r

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2016-9564?
CVE-2016-9564 is categorized as a high-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2016-9564?
To mitigate CVE-2016-9564, you should upgrade the Boa Webserver to a version that does not contain this vulnerability.
What type of attack does CVE-2016-9564 allow?
CVE-2016-9564 allows remote attackers to cause denial of service through a crafted HTTP GET request.
Which versions of Boa Webserver are affected by CVE-2016-9564?
CVE-2016-9564 specifically affects Boa Webserver version 0.92r.
What kind of exploit is CVE-2016-9564 related to?
CVE-2016-9564 is related to a buffer overflow exploit triggered by long URIs composed of '/' and '.' characters.