CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-8743

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.023

EPSS Ranking 84.2%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2016-8743

Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.10

cpe:2.3:a:apache:http_server:2.2.10
Apache » Http Server » Version: 2.2.11

cpe:2.3:a:apache:http_server:2.2.11
Apache » Http Server » Version: 2.2.12

cpe:2.3:a:apache:http_server:2.2.12
Apache » Http Server » Version: 2.2.13

cpe:2.3:a:apache:http_server:2.2.13
Apache » Http Server » Version: 2.2.14

cpe:2.3:a:apache:http_server:2.2.14
Apache » Http Server » Version: 2.2.15

cpe:2.3:a:apache:http_server:2.2.15
Apache » Http Server » Version: 2.2.15-60

cpe:2.3:a:apache:http_server:2.2.15-60
Apache » Http Server » Version: 2.2.16

cpe:2.3:a:apache:http_server:2.2.16
Apache » Http Server » Version: 2.2.17

cpe:2.3:a:apache:http_server:2.2.17
Apache » Http Server » Version: 2.2.18

cpe:2.3:a:apache:http_server:2.2.18
Apache » Http Server » Version: 2.2.19

cpe:2.3:a:apache:http_server:2.2.19
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.20

cpe:2.3:a:apache:http_server:2.2.20
Apache » Http Server » Version: 2.2.21

cpe:2.3:a:apache:http_server:2.2.21
Apache » Http Server » Version: 2.2.22

cpe:2.3:a:apache:http_server:2.2.22
Apache » Http Server » Version: 2.2.23

cpe:2.3:a:apache:http_server:2.2.23
Apache » Http Server » Version: 2.2.24

cpe:2.3:a:apache:http_server:2.2.24
Apache » Http Server » Version: 2.2.25

cpe:2.3:a:apache:http_server:2.2.25
Apache » Http Server » Version: 2.2.26

cpe:2.3:a:apache:http_server:2.2.26
Apache » Http Server » Version: 2.2.27

cpe:2.3:a:apache:http_server:2.2.27
Apache » Http Server » Version: 2.2.28

cpe:2.3:a:apache:http_server:2.2.28
Apache » Http Server » Version: 2.2.29

cpe:2.3:a:apache:http_server:2.2.29
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.30

cpe:2.3:a:apache:http_server:2.2.30
Apache » Http Server » Version: 2.2.31

cpe:2.3:a:apache:http_server:2.2.31
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4
Apache » Http Server » Version: 2.2.5

cpe:2.3:a:apache:http_server:2.2.5
Apache » Http Server » Version: 2.2.6

cpe:2.3:a:apache:http_server:2.2.6
Apache » Http Server » Version: 2.2.7

cpe:2.3:a:apache:http_server:2.2.7
Apache » Http Server » Version: 2.2.8

cpe:2.3:a:apache:http_server:2.2.8
Apache » Http Server » Version: 2.2.9

cpe:2.3:a:apache:http_server:2.2.9
Apache » Http Server » Version: 2.4.1

cpe:2.3:a:apache:http_server:2.4.1
Apache » Http Server » Version: 2.4.10

cpe:2.3:a:apache:http_server:2.4.10
Apache » Http Server » Version: 2.4.11

cpe:2.3:a:apache:http_server:2.4.11
Apache » Http Server » Version: 2.4.12

cpe:2.3:a:apache:http_server:2.4.12
Apache » Http Server » Version: 2.4.13

cpe:2.3:a:apache:http_server:2.4.13
Apache » Http Server » Version: 2.4.14

cpe:2.3:a:apache:http_server:2.4.14
Apache » Http Server » Version: 2.4.15

cpe:2.3:a:apache:http_server:2.4.15
Apache » Http Server » Version: 2.4.16

cpe:2.3:a:apache:http_server:2.4.16
Apache » Http Server » Version: 2.4.17

cpe:2.3:a:apache:http_server:2.4.17
Apache » Http Server » Version: 2.4.18

cpe:2.3:a:apache:http_server:2.4.18
Apache » Http Server » Version: 2.4.19

cpe:2.3:a:apache:http_server:2.4.19
Apache » Http Server » Version: 2.4.2

cpe:2.3:a:apache:http_server:2.4.2
Apache » Http Server » Version: 2.4.20

cpe:2.3:a:apache:http_server:2.4.20
Apache » Http Server » Version: 2.4.21

cpe:2.3:a:apache:http_server:2.4.21
Apache » Http Server » Version: 2.4.22

cpe:2.3:a:apache:http_server:2.4.22
Apache » Http Server » Version: 2.4.23

cpe:2.3:a:apache:http_server:2.4.23
Apache » Http Server » Version: 2.4.3

cpe:2.3:a:apache:http_server:2.4.3
Apache » Http Server » Version: 2.4.4

cpe:2.3:a:apache:http_server:2.4.4
Apache » Http Server » Version: 2.4.5

cpe:2.3:a:apache:http_server:2.4.5
Apache » Http Server » Version: 2.4.6

cpe:2.3:a:apache:http_server:2.4.6
Apache » Http Server » Version: 2.4.7

cpe:2.3:a:apache:http_server:2.4.7
Apache » Http Server » Version: 2.4.8

cpe:2.3:a:apache:http_server:2.4.8
Apache » Http Server » Version: 2.4.9

cpe:2.3:a:apache:http_server:2.4.9
Netapp » Clustered Data Ontap » Version: N/A

cpe:2.3:a:netapp:clustered_data_ontap:-
Netapp » Oncommand Unified Manager » Version: N/A

cpe:2.3:a:netapp:oncommand_unified_manager:-
Redhat » Jboss Core Services » Version: 1.0

cpe:2.3:a:redhat:jboss_core_services:1.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_eus:7.3
Redhat » Enterprise Linux Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4
Redhat » Enterprise Linux Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5
Redhat » Enterprise Linux Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-8743

Products

Pricing

Contact Us