High severity7.5NVD Advisory· Published May 12, 2017· Updated May 13, 2026
CVE-2016-4864
CVE-2016-4864
Description
H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.
Affected products
1- Range: versions 2.0.3 and earlier
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/h2o/h2o/issues/1077nvdPatchThird Party Advisory
- jvn.jp/en/jp/JVN94779084/index.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.