Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Maksim Malyutin

#35287of 53,635
7.5Total CVSS
Vulnerabilities · 1
PT-2016-3151
7.5
2016-12-20
Apache · Apache Http Server · CVE-2016-2161
**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server versions 2.4.0 through 2.4.23 **Description** The issue is caused by insufficient input validation in the mod auth digest module of the Apache HTTP Server. This can be exploited by a remote attacker to cause the server to crash. Each instance of the server continues to crash even when subsequent valid requests are made. **Recommendations** For Apache HTTP Server versions 2.4.0 through 2.4.23, consider disabling the mod auth digest module as a temporary workaround until a patch is available. Restrict access to the mod auth digest module to minimize the risk of exploitation. Update to a version that includes the fix for this issue to fully resolve it.