Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-0253
HistoryJul 20, 2015 - 11:59 p.m.

CVE-2015-0253

2015-07-2023:59:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
75
cve-2015-0253
apache http server
protocol.c
remote attackers
denial of service
null pointer dereference
process crash
includes filter
errordocument 400 directive
nvd

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON

The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.

References

Related

prion 1
debiancve 1
openvas 7
f5 2
httpd 1
ubuntucve 1
debian 1
nessus 14
securityvulns 4
fedora 2
oraclelinux 1
redhat 1
archlinux 1
kaspersky 1
slackware 1
amazon 1
freebsd 1
veracode 1
prion
prion
Null pointer dereference
2015-07-20 23:59:00
debiancve
debiancve
CVE-2015-0253
2015-07-20 23:59:00
openvas
openvas
Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Linux
2015-08-14 00:00:00
Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Windows
2015-08-14 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-579)
2015-09-08 00:00:00
f5
f5
K17317 : Apache HTTP server vulnerability CVE-2015-0253
2015-09-24 00:00:00
SOL17317 - Apache HTTP server vulnerability CVE-2015-0253
2015-09-24 00:00:00
httpd
httpd
Apache Httpd < 2.4.16 : Crash in ErrorDocument 400 handling
2015-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2015-0253
2015-07-20 00:00:00
debian
debian
[SECURITY] [DLA 841-2] apache2 regression update
2017-07-29 17:41:52
nessus
nessus
Debian DLA-841-2 : apache2 regression update
2017-03-01 00:00:00
Amazon Linux AMI : httpd24 (ALAS-2015-579)
2015-08-18 00:00:00
Fedora 21 : httpd-2.4.16-1.fc21 (2015-11792)
2015-07-30 00:00:00
securityvulns
securityvulns
Apache security vulnerabilities
2015-07-20 00:00:00
[slackware-security] httpd &#40;SSA:2015-198-01&#41;
2015-07-20 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: httpd-2.4.16-1.fc22
2015-07-21 08:12:37
[SECURITY] Fedora 21 Update: httpd-2.4.16-1.fc21
2015-07-30 00:52:03
oraclelinux
oraclelinux
httpd24-httpd security update
2016-02-04 00:00:00
redhat
redhat
(RHSA-2015:1666) Moderate: httpd24-httpd security update
2015-08-24 00:00:00
archlinux
archlinux
apache: multiple issues
2015-07-17 00:00:00
kaspersky
kaspersky
KLA10640 Multiple vulnerabilities in Apache HTTP Server
2015-07-21 00:00:00
slackware
slackware
[slackware-security] httpd
2015-07-17 20:25:06
amazon
amazon
Medium: httpd24
2015-08-17 12:27:00
freebsd
freebsd
apache24 -- multiple vulnerabilities
2015-02-04 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:18:03

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON
Related for CVE-2015-0253
prion1debiancve1openvas7f52httpd1ubuntucve1debian1nessus14securityvulns4fedora2oraclelinux1redhat1archlinux1kaspersky1slackware1amazon1freebsd1veracode1