Lucene search

K
cvelistApacheCVELIST:CVE-2016-8734
HistoryOct 13, 2017 - 12:00 a.m.

CVE-2016-8734

2017-10-1300:00:00
apache
raw.githubusercontent.com
2

6.3 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

Apache Subversion’s mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.