CVE-2016-8743 in macOS

요약 (영어)

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

예약하다

2016. 10. 18.

공개

2017. 07. 27.

상태

확인됨

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
108932	Apple macOS apache	19	정의되지 않음	공식 수정	CVE-2016-8743
100191	Oracle Secure Global Desktop Web Server (Apache HTTP Server) 정보 공개	19	정의되지 않음	공식 수정	CVE-2016-8743
98605	Apple macOS Apache 서비스 거부	19	정의되지 않음	공식 수정	CVE-2016-8743
94625	Apache HTTP Server Response Split 서비스 거부	19	정의되지 않음	공식 수정	CVE-2016-8743

출처

• MITRE
• NVD
• CVE Details