CVE-2015-0228
Fixed in a distro release EPSS 16%
The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
Products: apache http_server, canonical ubuntu_linux, apple mac_os_x, apple mac_os_x_server, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.4.10-10 |
| Debian 13 | apache2 | 2.4.10-10 |
| Debian 14 | apache2 | 2.4.10-10 |
| Red Hat rhel software collections 2 | httpd24-httpd | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-httpd | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-httpd-debuginfo | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-httpd-debuginfo | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-httpd-devel | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-httpd-devel | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-httpd-manual | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-httpd-manual | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-httpd-tools | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-httpd-tools | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-mod_ldap | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-mod_ldap | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-mod_proxy_html | 1:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-mod_proxy_html | 1:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-mod_session | 0:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-mod_session | 0:2.4.12-6.el7.1 |
| Red Hat rhel software collections 2 | httpd24-mod_ssl | 1:2.4.12-4.el6.2 |
| Red Hat rhel software collections 2 | httpd24-mod_ssl | 1:2.4.12-6.el7.1 |
| SUSE Linux Enterprise Server 12 | apache2 | 2.4.10-12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | apache2 | 2.4.10-12.1 |
| SUSE Linux Enterprise Software Development Kit 12 | apache2 | 2.4.10-12.1 |
| Ubuntu 14.04 LTS | apache2 | 2.4.7-1ubuntu4.4 |
| openSUSE Tumbleweed | apache2 | 2.4.23-4.1 |