Vulnerability in Apache HTTP Server
CVE-2015-0253
The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.130 (96.2th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 96.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.149 · newest: 0.130 · change: -0.019
Affected products
- Apache HTTP Server — versions 2.4.12
- Apple Mac OS X — versions 10.10.4
- Apple Mac OS X Server — versions 5.0.3
- Oracle Linux — versions 7
- Oracle Solaris — versions 11.3
References
- bz.apache.org/bugzilla/show_bug.cgi (Issue Tracking)
- httpd.apache.org/security/vulnerabilities_24.html (Vendor Advisory)
- github.com/apache/httpd/commit/6a974059190b8a0c7e499f4ab12fe108127099cb
- www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html (Third Party Advisory)
- www.apache.org/dist/httpd/CHANGES_2.4 (Release Notes, Vendor Advisory)
- rhn.redhat.com/errata/RHSA-2015-1666.html (vendor-advisory)
- www.securitytracker.com/id/1032967 (vdb-entry)
- lists.apple.com/archives/security-announce/2015/Aug/msg00001.html (vendor-advisory, Mailing List)
- www.securityfocus.com/bid/75964 (vdb-entry)
- support.apple.com/kb/HT205031 (Third Party Advisory)