Lucene search

K
f5F5SOL17317
HistorySep 24, 2015 - 12:00 a.m.

SOL17317 - Apache HTTP server vulnerability CVE-2015-0253

2015-09-2400:00:00
support.f5.com
29

0.017 Low

EPSS

Percentile

87.9%

The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI. (CVE-2015-0253)