CVE-2016-7835

—

CVSS 3.0

9.1 critical

EPSS

2%p82

Published

Jun 9, 2017 (Jun 9, 2017)

Modified

Jun 17, 2026

Description

Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.

Vendors: dena h2o project
Products: h2o
Weakness: CWE-416
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.