Description

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

Remediation

References

CVE-2016-5396

Related Vulnerabilities

MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1010123)

WordPress Plugin Under Construction/Maintenance Mode from Acurax Multiple Unspecified Vulnerabilities (2.5.2)

WordPress Improper Input Validation Vulnerability (CVE-2007-1277)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-10705)

IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4660)

Severity

High

Classification

CVE-2016-5396 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities