CVE-2016-8612
published 2018-03-09CVE-2016-8612: Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer…
PriorityP423medium4.3CVSS 3.0
AVAACLPRNUINSUCNINAL
EPSS
4.44%
91.3th percentile
Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | < 2.4.23 | 2.4.23 |
| red_hat_inc | mod_cluster | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
mod_cluster: Protocol parsing logic error
vendor_redhat·2016-12-15·CVSS 4.3
CVE-2016-8612 [MEDIUM] CWE-20 mod_cluster: Protocol parsing logic error
mod_cluster: Protocol parsing logic error
Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.
An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.
Package: mod_cluster (Red Hat JBoss Enterprise Application Platform 5) - Will not fix
Package: mod_cluster (Red Hat JBoss Enterprise Application Platform 6) - Will not fix
Package: mod_cluster (Red Hat JBoss Enterprise Application Platform 7) - Not affected
Package: mod_cluster (Red Hat JBoss Enterprise Web Server 2) - Will not fix
Pac
GHSA
GHSA-pw68-p55m-86x8: Apache HTTP Server mod_cluster before version httpd 2
ghsa_unreviewed·2022-05-13
CVE-2016-8612 [MEDIUM] CWE-20 GHSA-pw68-p55m-86x8: Apache HTTP Server mod_cluster before version httpd 2
Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-8612 JBCS mod_cluster: Protocol parsing logic error
bugzilla·2016-10-21·CVSS 4.3
CVE-2016-8612 [MEDIUM] CVE-2016-8612 JBCS mod_cluster: Protocol parsing logic error
CVE-2016-8612 JBCS mod_cluster: Protocol parsing logic error
There is an error in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules that allows attacker to cause a Segmentation Fault in the serving httpd process. The vector is mod_cluster service messages that are used by worker nodes to communicate their status, load and deployed applications to the mod_cluster balancer. With proper production configuration, the VirtualHost accepting these messages is accessible only from an internal network where worker nodes reside. The error cannot be exploited from the Internet by arbitrary clients.
Upstream bug:
https://issues.jboss.org/browse/JBCS-193
Discussion:
This issue has been addressed in the following products:
Via RHSA-2016:2957 https://rhn.redhat.com/err
CTF
Jacob the Boss / Readme
ctf_writeups·CVSS 9.8
CVE-2023-38408 [CRITICAL] Jacob the Boss / Readme
# [Jacob the Boss - TryHackMe writeup](https://tryhackme.com/room/jacobtheboss)
Find a way in and learn a little more.
## Task 1
Well, the flaw that makes up this box is the reproduction found in the production environment of a customer a while ago, the verification in season consisted of two steps, the last one within the environment, we hit it head-on and more than 15 machines were vulnerable that together with the development team we were able to correct and adapt.
*First of all, add the jacobtheboss.box address to your hosts file.*
Anyway, learn a little more, have fun!
Answer the questions below
### user.txt
```
f4d491f280de360cc49e26ca1587cbcc
```
### root.txt
```
29a5641eaa0c01abe5749608c8232806
```
## Initial Enumeration
I started with a full port and service scan usi
http://rhn.redhat.com/errata/RHSA-2016-2957.htmlhttp://www.securityfocus.com/bid/94939https://access.redhat.com/errata/RHSA-2017:0193https://access.redhat.com/errata/RHSA-2017:0194https://bugzilla.redhat.com/show_bug.cgi?id=1387605https://security.netapp.com/advisory/ntap-20180601-0005/http://rhn.redhat.com/errata/RHSA-2016-2957.htmlhttp://www.securityfocus.com/bid/94939https://access.redhat.com/errata/RHSA-2017:0193https://access.redhat.com/errata/RHSA-2017:0194https://bugzilla.redhat.com/show_bug.cgi?id=1387605https://security.netapp.com/advisory/ntap-20180601-0005/
2018-03-09
Published