PT-2015-1595 · Apache · Apache Http Server

Yann Ylavic · Published 2015-03-05 · Updated 2024-06-15 · CVE-2015-0253

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server version 2.4.12

Description The issue is related to the read request line function in the server/protocol.c component of the Apache HTTP Server, which does not properly initialize a protocol structure member. This can be exploited by remote attackers to cause a denial of service, resulting in a process crash, by sending a request without a method to an installation that has the INCLUDES filter enabled and an ErrorDocument 400 directive specifying a local URI. The exploitation of this issue can lead to a NULL pointer dereference.

Recommendations For Apache HTTP Server version 2.4.12, consider disabling the INCLUDES filter or removing the ErrorDocument 400 directive specifying a local URI as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2015-10927

CVE-2015-0253

OPENSUSE-SU-2024:10268-1

RHSA-2015:1666

Affected Products

Apache Http Server

References · 80

• https://nvd.nist.gov/vuln/detail/CVE-2015-0253 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1666.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10927 · Security Note
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html · Vendor Advisory
• http://apache.org/dist/httpd/CHANGES_2.4 · Vendor Advisory
• http://httpd.apache.org/security/vulnerabilities_24.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10268-1 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1666.html · Vendor Advisory
• https://github.com/apache/httpd/commit/6a974059190b8a0c7e499f4ab12fe108127099cb · Note
• https://github.com/apache/httpd/commit/be0f5335e3e73eb63253b050fdc23f252f5c8ae3 · Note
• https://suse.com/security/cve/CVE-2009-1195 · Note
• https://suse.com/security/cve/CVE-2010-1623 · Note
• https://suse.com/security/cve/CVE-2012-0031 · Note
• https://suse.com/security/cve/CVE-2010-1452 · Note