Vulnerability & Exploit Database

Displaying entries 1 - 10 of 88137 in total

Apache HTTPD: HTTP/2 CONTINUATION denial of service (CVE-2016-8740) Vulnerability

  • Severity: 5
  • Published: December 04, 2016

The HTTP/2 protocol implementation (mod_http2) had an incomplete handling of the LimitRequestFields directive. This allowed an attacker to inject unlimited request headers into the server, leading to eventual memory exhaustion.

SUSE: CVE-2016-6160: SUSE Linux Security Advisory Vulnerability

  • Severity: 4
  • Published: December 04, 2016

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.

From SUSE_CVE-2016-6160:

This CVE is addressed in the SUSE advisories

SUSE: CVE-2016-8568: SUSE Linux Security Advisory Vulnerability

  • Severity: 4
  • Published: December 02, 2016

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.

From SUSE_CVE-2016-8568:

This CVE is addressed in the SUSE advisories