PT-2015-1594 · Apache+3 · Apache Http Server+3

Guido Vranken · Published 2015-02-04 · Updated 2024-06-15 · CVE-2015-0228

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.7 through 2.4.12

Description The issue is related to the lua websocket read function in the mod lua module, which allows remote attackers to cause a denial of service by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function. This is due to insufficient input validation. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited. Technical details include the lua websocket read function and the wsupgrade function, which can be exploited by sending a specially crafted WebSocket Ping request to the / API endpoint, although the exact endpoint is not specified.

Recommendations For Apache HTTP Server versions 2.4.7 through 2.4.12, update to a version later than 2.4.12 to resolve the issue. As a temporary workaround, consider disabling the lua websocket read function or restricting the use of the wsupgrade function in Lua scripts until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2016-1385

BDU:2015-10926

CVE-2015-0228

MGASA-2015-0099

OPENSUSE-SU-2024:10268-1

RHSA-2015:1666

SUSE-SU-2015:0974-1

USN-2523-1

Affected Products

Alt Linux

Apache Http Server

Suse

Ubuntu

References · 102

• http://rhn.redhat.com/errata/RHSA-2015-1666.html · Vendor Advisory
• http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-5704 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8109 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3581 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2523-1 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-0228 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-0228 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3583 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2523-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10268-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-0228 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html · Vendor Advisory