CVE-2016-4459

High

Published: 12/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code, potentially taking control of the system.

Recommendation

It is recommended to upgrade to the latest version of mod_cluster to mitigate this vulnerability.

Other vulnerabilities in mod_cluster 1.2.9

CVE-2026-76166Medium
In mod_cluster's AdvertiseListenerImpl, a single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without "Date:", "Digest:", and "Sequence:" headers triggers a NullPointerException in verifyDigest() that is not caught. This causes the advertise listener thread to terminate permanently, and the failure is silent (isListening() continues to return true) until the node is restarted.

Original NVD description (English source)

Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS