CVE-2016-5004 in Archiva

Sumário (Inglês)

The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

24/05/2016

Divulgação

06/06/2017

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
90263	Apache Archiva Header Negação de Serviço	400	Não definido	Unavailable	CVE-2016-5004

Fontes

• MITRE
• NVD
• CVE Details