CVE-2016-2515

7.8

HIGHCVSS v2

Published

April 13, 2016

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.

hawk

NPMHTTP Hawk Authentication Scheme

= 4.1.0, = 3.1.2, >= 4.0.0, < 4.1.1, < 3.1.3NVD

mozilla/hawk

GitHubINACTIVE - HTTP Holder-Of-Key Authentication Scheme

= 4.1.0, = 3.1.2, >= 4.0.0, < 4.1.1, < 3.1.3NVD

hapijs/hawk

GitHub

More on this CVE

NVD↗GitHub Advisory↗

= 4.1.0, = 3.1.2, >= 4.0.0, < 4.1.1, < 3.1.3NVD

ClusterLabs/hawk

GitHubA web-based GUI for managing and monitoring the Pacemaker High-Availability cluster resource manager

= 4.1.0, = 3.1.2, >= 4.0.0, < 4.1.1, < 3.1.3NVD

Security Advisories

CVE-2016-2515

Description

More on this CVE