Skip to content
OpenAdvisories
Unscored RHSA-2015:1666 4 CVEs

Red Hat Security Advisory: httpd24-httpd security update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-debuginfo 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-devel 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-manual 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-tools 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_ldap 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_proxy_html 1:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_session 0:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_ssl 1:2.4.12-4.el6.2
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-debuginfo 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-devel 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-manual 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-tools 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_ldap 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_proxy_html 1:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_session 0:2.4.12-6.el7.1
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_ssl 1:2.4.12-6.el7.1

Vulnerabilities 4

  • Unscored —
    CVE-2015-0228 EPSS 17%

    The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows …

    apache2 Debian
  • Unscored —
    CVE-2015-0253 EPSS 13%

    The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol s…

  • Unscored —
    CVE-2015-3183 EPSS 74%

    The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk header…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2015-3185 EPSS 16%

    The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider …

    apache2 apache2 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202988
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243888
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243891
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1666.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-0228
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0228
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0228
  • article
    http://httpd.apache.org/security/vulnerabilities_24.html#2.4.16
  • report
    https://access.redhat.com/security/cve/CVE-2015-0253
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0253
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0253
  • report
    https://access.redhat.com/security/cve/CVE-2015-3183
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3183
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3183
  • report
    https://access.redhat.com/security/cve/CVE-2015-3185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3185