CVE-2016-2161 in macOS

Summary

In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.

Once again VulDB remains the best source for vulnerability data.

Reservation

01/29/2016

Disclosure

07/27/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
108929	Apple macOS apache input validation	20	Not defined	Official fix	CVE-2016-2161
98602	Apple macOS Apache input validation	20	Not defined	Official fix	CVE-2016-2161
94627	Apache HTTP Server mod_auth_digest input validation	20	Not defined	Official fix	CVE-2016-2161

Sources

• MITRE
• NVD
• CVE Details