CVE-2016-6817

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119 CWE-835

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Tomcat	9.0.0.M1 to 9.0.0.M11; 8.5.0 to 8.5.6

References

Timeline

Published: Aug 10, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-68189.8SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive informatio CVE-2016-68207.5MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by CVE-2016-68237.5Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted he CVE-2016-68246.5Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause CVE-2016-68259.8Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SP CVE-2016-68266.5Huawei AnyMail before 2.6.0301.0060 allows remote attackers to cause a denial of service (application crash) via a crafted compressed email CVE-2016-68276.5Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensiti CVE-2016-68285.5The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a CVE-2016-68299.8The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-t CVE-2016-68309.8The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment var CVE-2016-68317.5The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak CVE-2016-68325.5Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of