Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2015-0253
HistoryJul 20, 2015 - 11:00 p.m.

CVE-2015-0253

2015-07-2023:00:00
redhat
www.cve.org
1

8.1 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

JSON

The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.

References

Related

f5 2
cve 1
ubuntucve 1
nvd 1
prion 1
httpd 1
openvas 7
debiancve 1
nessus 14
debian 1
securityvulns 4
freebsd 1
amazon 1
veracode 1
fedora 2
kaspersky 1
slackware 1
archlinux 1
redhat 1
oraclelinux 1
f5
f5
SOL17317 - Apache HTTP server vulnerability CVE-2015-0253
2015-09-24 00:00:00
K17317 : Apache HTTP server vulnerability CVE-2015-0253
2015-09-24 00:00:00
cve
cve
CVE-2015-0253
2015-07-20 23:59:00
ubuntucve
ubuntucve
CVE-2015-0253
2015-07-20 00:00:00
nvd
nvd
CVE-2015-0253
2015-07-20 23:59:00
prion
prion
Null pointer dereference
2015-07-20 23:59:00
httpd
httpd
Apache Httpd < 2.4.16 : Crash in ErrorDocument 400 handling
2015-02-03 00:00:00
openvas
openvas
Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Windows
2015-08-14 00:00:00
Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Linux
2015-08-14 00:00:00
Fedora Update for httpd FEDORA-2015-11689
2015-07-22 00:00:00
debiancve
debiancve
CVE-2015-0253
2015-07-20 23:59:00
nessus
nessus
Debian DLA-841-2 : apache2 regression update
2017-03-01 00:00:00
Fedora 22 : httpd-2.4.16-1.fc22 (2015-11689)
2015-07-22 00:00:00
FreeBSD : apache24 -- multiple vulnerabilities (a12494c1-2af4-11e5-86ff-14dae9d210b8)
2015-07-16 00:00:00
debian
debian
[SECURITY] [DLA 841-2] apache2 regression update
2017-07-29 17:41:52
securityvulns
securityvulns
Apache security vulnerabilities
2015-07-20 00:00:00
[slackware-security] httpd &#40;SSA:2015-198-01&#41;
2015-07-20 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
freebsd
freebsd
apache24 -- multiple vulnerabilities
2015-02-04 00:00:00
amazon
amazon
Medium: httpd24
2015-08-17 12:27:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:18:03
fedora
fedora
[SECURITY] Fedora 22 Update: httpd-2.4.16-1.fc22
2015-07-21 08:12:37
[SECURITY] Fedora 21 Update: httpd-2.4.16-1.fc21
2015-07-30 00:52:03
kaspersky
kaspersky
KLA10640 Multiple vulnerabilities in Apache HTTP Server
2015-07-21 00:00:00
slackware
slackware
[slackware-security] httpd
2015-07-17 20:25:06
archlinux
archlinux
apache: multiple issues
2015-07-17 00:00:00
redhat
redhat
(RHSA-2015:1666) Moderate: httpd24-httpd security update
2015-08-24 00:00:00
oraclelinux
oraclelinux
httpd24-httpd security update
2016-02-04 00:00:00

8.1 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

JSON
Related for CVELIST:CVE-2015-0253
f52cve1ubuntucve1nvd1prion1httpd1openvas7debiancve1nessus14debian1securityvulns4freebsd1amazon1veracode1fedora2kaspersky1slackware1archlinux1redhat1oraclelinux1