NVD

Id
22727  
Name
CVE-2015-0228  
Description
The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-03-07  
Modified Date
2016-11-28  
Seq
2015-0228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
120215 22727 CVE-2015-0228 http://advisories.mageia.org/MGASA-2015-0099.html  View
120216 22727 CVE-2015-0228 APPLE-SA-2015-08-13-2  View
120217 22727 CVE-2015-0228 APPLE-SA-2015-09-16-4  View
120218 22727 CVE-2015-0228 openSUSE-SU-2015:0418  View
120219 22727 CVE-2015-0228 http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES  View
120220 22727 CVE-2015-0228 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
120221 22727 CVE-2015-0228 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
120222 22727 CVE-2015-0228 73041  View
120223 22727 CVE-2015-0228 91787  View
120224 22727 CVE-2015-0228 USN-2523-1  View
120225 22727 CVE-2015-0228 https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef  View
120226 22727 CVE-2015-0228 https://support.apple.com/HT205219  View
120227 22727 CVE-2015-0228 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6353 JVNDB-2015-001673 Apache HTTP Server の mod_lua モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_lua モジュールの lua_request.c 内の lua_websocket_read 関数には、サービス運用妨害 (子プロセスのクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-0228 77439 CVE-2015-0228 22727 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001673.html 2015-02-04 2016-07-27 View