Description

mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.

Remediation

References

CVE-2016-3110

Related Vulnerabilities

WordPress Plugin WooCommerce Social Login PHP Object Injection (2.6.3)

WordPress Plugin Viper's Video Quicktags Unspecified Vulnerability (6.4.4)

WordPress Plugin Import XML and RSS Feeds Remote Code Execution (2.1.4)

WordPress Plugin The Plus Addons for Elementor Page Builder Lite Multiple Cross-Site Scripting Vulnerabilities (2.0.5)

OpenSSL Improper Input Validation Vulnerability (CVE-2009-3245)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2016-3110