High severity7.5NVD Advisory· Published May 12, 2017· Updated Jun 17, 2026
CVE-2016-4864
CVE-2016-4864
Description
H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4versions 2.0.3 and earlier+ 3 more
- (no CPE)range: versions 2.0.3 and earlier
- cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*range: >=2.0.0,<=2.0.3
- cpe:2.3:a:dena:h2o:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:dena:h2o:2.1.0:beta1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/h2o/h2o/issues/1077nvdPatchThird Party Advisory
- jvn.jp/en/jp/JVN94779084/index.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.