CVE-2015-0253
MEDIUM severity · CVSS 5
5CVSS MEDIUM
Summary
The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impactNone
Availability impact—
Exploit probability (EPSS)13%
AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://httpd.apache.org/security/vulnerabilities_24.htmlAdvisory
- http://www.apache.org/dist/httpd/CHANGES_2.4Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
- http://rhn.redhat.com/errata/RHSA-2015-1666.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlAdvisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlAdvisory
- http://www.securityfocus.com/bid/75964