VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 15, 2016· Updated Jun 17, 2026

CVE-2016-2146

CVE-2016-2146

Description

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server deadlock, or memory consumption) via a large amount of POST data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Uninett/Mod Auth Mellon2 versions
    cpe:2.3:a:uninett:mod_auth_mellon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:uninett:mod_auth_mellon:*:*:*:*:*:*:*:*range: <=0.11.0
    • (no CPE)range: <0.11.1
  • Fedoraproject/Fedora
    cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.