CVE-2016-8734

2017-10-16T13:29:00
ID CVE-2016-8734
Type cve
Reporter cve@mitre.org
Modified 2019-02-25T20:08:00

Description

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.