Advisory details:
apache_httpd / CVE-2016-1546
| Advisory ID | apache_httpd/CVE-2016-1546 |
| Aliases | |
| Summary | By manipulating the flow control windows on streams, a client was able to block server threads for long times, causing starvation of worker threads. Connections could still be opened, but no streams where processed for these. This issue affected HTTP/2 support in 2.4.17 and 2.4.18. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| apache_httpd | low |
| Reference id | Reference type | URL |
|---|---|---|
| CVE-2016-1546 | https://httpd.apache.org/security/json/CVE-2016-1546.json |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.