Lucene search

K
freebsdFreeBSD29083F8E-2CA8-11E5-86FF-14DAE9D210B8
HistoryJun 24, 2015 - 12:00 a.m.

apache22 -- chunk header parsing defect

2015-06-2400:00:00
vuxml.freebsd.org
18

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.072 Low

EPSS

Percentile

93.9%

Apache Foundation reports:

CVE-2015-3183 core: Fix chunk header parsing defect. Remove
apr_brigade_flatten(), buffering and duplicated code from the HTTP_IN
filter, parse chunks in a single pass with zero copy. Limit accepted
chunk-size to 2^63-1 and be strict about chunk-ext authorized
characters.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.072 Low

EPSS

Percentile

93.9%