Apache HTTP Server Resource Management Errors Vulnerability - CVE-2016-1546 - Vulnerability Database

Apache HTTP Server Resource Management Errors Vulnerability - CVE-2016-1546

Medium

Reference: CVE-2016-1546

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-1546

Title: Apache HTTP Server Resource Management Errors Vulnerability

Overview:

The Apache HTTP Server 2.4.17 and 2.4.18 when mod_http2 is enabled does not limit the number of simultaneous stream workers for a single HTTP/2 connection which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.