| | 2 | |
| | 3 | |
| | 4 | {{{ |
| | 5 | CVE-2016-0736 mod_session_crypto: Authenticate the session data/cookie with a MAC (SipHash) to prevent deciphering or tampering with a padding oracle attack. |
| | 6 | CVE-2016-2161 mod_auth_digest: Prevent segfaults during client entry allocation when the shared memory space is exhausted. |
| | 7 | CVE-2016-5387 core: Mitigate [f]cgi "httpoxy" issues. |
| | 8 | CVE-2016-8740 mod_http2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. |
| | 9 | CVE-2016-8743 Enforce HTTP request grammar corresponding to RFC7230 for request lines and request headers, to prevent response splitting and cache pollution by malicious clients or downstream proxies. |
| | 10 | |
| | 11 | }}} |
