Skip to content
OpenAdvisories
Unscored USN-2686-1 2 CVEs

apache2 vulnerabilities

Published Jul 27, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Apache HTTP Server incorrectly parsed chunk
headers. A remote attacker could possibly use this issue to perform HTTP
request smuggling attacks. (CVE-2015-3183)

It was discovered that the Apache HTTP Server incorrectly handled the
ap_some_auth_required API. A remote attacker could possibly use this issue
to bypass intended access restrictions. This issue only affected Ubuntu
14.04 LTS and Ubuntu 15.04. (CVE-2015-3185)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS apache2 2.4.7-1ubuntu4.5

Vulnerabilities 2

  • Unscored —
    CVE-2015-3183 EPSS 74%

    The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk header…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2015-3185 EPSS 16%

    The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider …

    apache2 apache2 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-3183
  • report
    https://ubuntu.com/security/CVE-2015-3185