high7.5
CVE-2016-4864
H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a templat…
Impact
H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dena | H2o | from 2.0.0 through 2.0.3 Version 2.1.0 |