VulnerabilityModified

CVE-2016-8612

Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.

MEDIUM 4.3EPSS 4.44%

Does this matter?

Lower severity and a low EPSS score (4.44%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.0: 4.3 MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 4.44% probability · 91th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: apache/http server · redhat/enterprise linux · netapp/storage automation store
Source: secalert@redhat.com

References

http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory
http://www.securityfocus.com/bid/94939Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:0193Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:0194Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1387605Issue Tracking, Third Party Advisory
https://security.netapp.com/advisory/ntap-20180601-0005/Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory
http://www.securityfocus.com/bid/94939Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:0193Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:0194Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1387605Issue Tracking, Third Party Advisory
https://security.netapp.com/advisory/ntap-20180601-0005/Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.