Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2017-10-16T13:00:00Z

Updated: 2024-09-16T20:01:52.257Z

Reserved: 2016-10-18T00:00:00

Link: CVE-2016-8734

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-10-16T13:29:00.220

Modified: 2023-11-07T02:36:28.627

Link: CVE-2016-8734

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-11-29T00:00:00Z

Links: CVE-2016-8734 - Bugzilla