Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: apache
Published: 2017-10-16T13:00:00Z
Updated: 2024-09-16T20:01:52.257Z
Reserved: 2016-10-18T00:00:00
Link: CVE-2016-8734
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-16T13:29:00.220
Modified: 2023-11-07T02:36:28.627
Link: CVE-2016-8734
Redhat