Vulnerabilities > CVE-2016-7835 - Use After Free vulnerability in multiple products

CVSS 9.1 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

h2o-project

dena

CWE-416

critical

NVD

Published: 2017-06-09

Updated: 2021-04-19

Summary

Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.

Vulnerable Configurations

Part	Description	Count
Application	H2O_Project H2O Project H2O 2.1.0	1
Application	Dena Dena H2O 0.9.0 Dena H2O 0.9.1 Dena H2O 0.9.2 Dena H2O 1.0.0 Dena H2O 1.0.1 Dena H2O 1.1.0 Dena H2O 1.1.1 Dena H2O 1.2.0 Dena H2O 1.3.0 Dena H2O 1.3.1 Dena H2O 1.4.0 Dena H2O 1.4.1 Dena H2O 1.4.2 Dena H2O 1.4.3 Dena H2O 1.4.4 Dena H2O 1.4.5 Dena H2O 1.5.0 Dena H2O 1.5.1 Dena H2O 1.5.2 Dena H2O 1.5.3 Dena H2O 1.5.4 Dena H2O 1.5.5 Dena H2O 1.6.0 Dena H2O 1.6.1 Dena H2O 1.6.2 Dena H2O 1.6.3 Dena H2O 1.7.0 Dena H2O 1.7.1 Dena H2O 1.7.2 Dena H2O 1.7.3 Dena H2O 2.0.0 Dena H2O 2.0.1 Dena H2O 2.0.2 Dena H2O 2.0.3 Dena H2O 2.0.4	52

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References