Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-0253
HistoryJul 20, 2015 - 11:59 p.m.

CVE-2015-0253

2015-07-2023:59:00
[email protected]
web.nvd.nist.gov
80
cve-2015-0253
apache http server
protocol.c
remote attackers
denial of service
null pointer dereference
process crash
includes filter
errordocument 400 directive
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.9 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

JSON

The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.

Affected configurations

NVD
Node
apachehttp_serverMatch2.4.12
Node
applemac_os_xMatch10.10.4
OR
applemac_os_x_serverMatch5.0.3
Node
oraclelinuxMatch7
OR
oraclesolarisMatch11.3

References

Related

f5 2
openvas 7
debiancve 1
cvelist 1
ubuntucve 1
nvd 1
prion 1
httpd 1
nessus 14
debian 1
securityvulns 4
oraclelinux 1
freebsd 1
amazon 1
veracode 1
fedora 2
kaspersky 1
slackware 1
archlinux 1
redhat 1
f5
f5
SOL17317 - Apache HTTP server vulnerability CVE-2015-0253
2015-09-24 00:00:00
K17317 : Apache HTTP server vulnerability CVE-2015-0253
2015-09-24 00:00:00
openvas
openvas
Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Windows
2015-08-14 00:00:00
Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Linux
2015-08-14 00:00:00
Oracle: Security Advisory (ELSA-2015-1666)
2016-02-05 00:00:00
debiancve
debiancve
CVE-2015-0253
2015-07-20 23:59:00
cvelist
cvelist
CVE-2015-0253
2015-07-20 23:00:00
ubuntucve
ubuntucve
CVE-2015-0253
2015-07-20 00:00:00
nvd
nvd
CVE-2015-0253
2015-07-20 23:59:00
prion
prion
Null pointer dereference
2015-07-20 23:59:00
httpd
httpd
Apache Httpd < 2.4.16 : Crash in ErrorDocument 400 handling
2015-02-03 00:00:00
nessus
nessus
Debian DLA-841-2 : apache2 regression update
2017-03-01 00:00:00
Apache 2.4.x < 2.4.16 Multiple Vulnerabilities
2019-01-09 00:00:00
Apache 2.4.x < 2.4.16 Multiple Vulnerabilities
2015-07-23 00:00:00
debian
debian
[SECURITY] [DLA 841-2] apache2 regression update
2017-07-29 17:41:52
securityvulns
securityvulns
Apache security vulnerabilities
2015-07-20 00:00:00
[slackware-security] httpd &#40;SSA:2015-198-01&#41;
2015-07-20 00:00:00
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
2015-08-17 00:00:00
oraclelinux
oraclelinux
httpd24-httpd security update
2016-02-04 00:00:00
freebsd
freebsd
apache24 -- multiple vulnerabilities
2015-02-04 00:00:00
amazon
amazon
Medium: httpd24
2015-08-17 12:27:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:18:03
fedora
fedora
[SECURITY] Fedora 22 Update: httpd-2.4.16-1.fc22
2015-07-21 08:12:37
[SECURITY] Fedora 21 Update: httpd-2.4.16-1.fc21
2015-07-30 00:52:03
kaspersky
kaspersky
KLA10640 Multiple vulnerabilities in Apache HTTP Server
2015-07-21 00:00:00
slackware
slackware
[slackware-security] httpd
2015-07-17 20:25:06
archlinux
archlinux
apache: multiple issues
2015-07-17 00:00:00
redhat
redhat
(RHSA-2015:1666) Moderate: httpd24-httpd security update
2015-08-24 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.9 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

JSON
Related for CVE-2015-0253
f52openvas7debiancve1cvelist1ubuntucve1nvd1prion1httpd1nessus14debian1securityvulns4oraclelinux1freebsd1amazon1veracode1fedora2kaspersky1slackware1archlinux1redhat1