CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Apache. Its EPSS score suggests a 19.6% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2016-2168
Severity
MEDIUM
CVSS
6.5
EPSS
19.63%
Apache
Original NVD Description
The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.