description: H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.
problem types: Format String Vulnerability
affected:
{
product: H2O
vendor: Kazuho Oku
versions:
status: affected, version: versions 2.0.3 and earlier
status: affected, version: versions 2.1.0-beta2 and earlier
}