CVE-2016-8734
At a glance Severity Not available EPSS EPSS 6.38 % · percentile 94 (2026-10-27) State PUBLISHED Published 2017-10-16 Updated 2024-09-16 Assigner apache NVD status Modified Description Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.0 AV:N/AC:L/Au:S/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
Affected configurations (NVD CPE) cpe:2.3:a:apache:subversion:1.4.0:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.4.1:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.4.2:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.4.3:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.4.4:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.4.5:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.4.6:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.0:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.1:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.2:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.3:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.4:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.5:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.6:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.7:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.5.8:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.0:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.1:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.2:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.3:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.4:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.5:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.6:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.7:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.8:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.9:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.10:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.11:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.12:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.13:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.14:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.15:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.16:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.17:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.18:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.19:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.20:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.21:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.6.23:*:*:*:*:*:*:*cpe:2.3:a:apache:subversion:1.7.0:*:*:*:*:*:*:*+44 more Affected products
References
Sources
