Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 5 min 162 bronnen 13 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2015-0228

MEDIUM · 5.0 CVSS Gepubliceerd: CWE-20

Beschrijving

The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.

Vendors

Apache Canonical Apple Opensuse

Affected products

Http Server Ubuntu Linux Mac Os X Mac Os X Server Opensuse

References