2 matches found
SUSE CVE-2015-0228
The luawebsocketread function in luarequest.c in the modlua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service child-process crash by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function...
5CVSS8.7AI score0.16472EPSS
SaveExploits0References4
Apache HTTP Server DoS
The vulnerability of the luawebsocketread function in the luarequest.c component of the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a specially crafted WebSocket Ping reques...
5CVSS6.5AI score0.16472EPSS
SaveExploits0References6Affected Software1
20