Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2015-0228

The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.

  • Published: Mar 8, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-0228
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
apache / http_server - 2.4.12.x
canonical / ubuntu_linux 12.04 12.04.x
canonical / ubuntu_linux 14.10 14.10.x
canonical / ubuntu_linux 14.04 14.04.x
canonical / ubuntu_linux 10.04 10.04.x
apple / mac_os_x 10.10.4 10.10.4.x
apple / mac_os_x_server 5.0.3 5.0.3.x
opensuse / opensuse 13.2 13.2.x