5
CVSSv2

CVE-2016-4864

Published: 12/05/2017 Updated: 26/02/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

H2O versions 2.0.3 and previous versions and 2.1.0-beta2 and previous versions allows remote malicious users to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dena h2o

dena h2o 2.1.0