CVE-2016-3110: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.

Affected products

• Fedoraproject Fedora: version 28 only; version 29 only; version 30 only
• Red Hat JBoss Enterprise Application Platform: version 6.0.0 only; version 6.4.0 only
• Red Hat JBoss Enterprise Web Server: version 2.0.0 only; version 2.1 only

Published 2016-09-26. Last modified 2026-06-17.