NVD

Id
25085  
Name
CVE-2015-3183  
Description
The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-07-20  
Modified Date
2016-12-23  
Seq
2015-3183  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132422 25085 CVE-2015-3183 http://httpd.apache.org/security/vulnerabilities_24.html  View
132423 25085 CVE-2015-3183 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
132424 25085 CVE-2015-3183 APPLE-SA-2015-08-13-2  View
132425 25085 CVE-2015-3183 APPLE-SA-2015-09-16-4  View
132426 25085 CVE-2015-3183 openSUSE-SU-2015:1684  View
132427 25085 CVE-2015-3183 SSRT102254  View
132428 25085 CVE-2015-3183 RHSA-2015:1667  View
132429 25085 CVE-2015-3183 RHSA-2015:1668  View
132430 25085 CVE-2015-3183 RHSA-2015:2661  View
132431 25085 CVE-2015-3183 RHSA-2016:0061  View
132432 25085 CVE-2015-3183 RHSA-2016:0062  View
132433 25085 CVE-2015-3183 http://www.apache.org/dist/httpd/CHANGES_2.4  View
132434 25085 CVE-2015-3183 DSA-3325  View
132435 25085 CVE-2015-3183 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
132436 25085 CVE-2015-3183 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
132437 25085 CVE-2015-3183 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
132438 25085 CVE-2015-3183 http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
132439 25085 CVE-2015-3183 75963  View
132440 25085 CVE-2015-3183 91787  View
132441 25085 CVE-2015-3183 USN-2686-1  View
132442 25085 CVE-2015-3183 RHSA-2015:2659  View
132443 25085 CVE-2015-3183 RHSA-2015:2660  View
132444 25085 CVE-2015-3183 https://github.com/apache/httpd/commit/e427c41257957b57036d5a549b260b6185d1dd73  View
132445 25085 CVE-2015-3183 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246  View
132446 25085 CVE-2015-3183 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789  View
132447 25085 CVE-2015-3183 https://support.apple.com/HT205219  View
132448 25085 CVE-2015-3183 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8478 JVNDB-2015-003798 Apache HTTP Server のチャンク形式転送コーディングの実装における HTTP リクエストスマグリング攻撃を実行される脆弱性 Apache HTTP Server のチャンク形式転送コーディング (chunked transfer coding) の実装は、チャンクヘッダを適切に解析しないため、HTTP リクエストスマグリング攻撃を実行される脆弱性が存在します。 CVE-2015-3183 80408 CVE-2015-3183 25085 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003798.html 2015-07-15 2016-07-27 View