Apache HttpComponents: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium —
  CVE-2015-5262 EPSS 19%

  Denial of service vulnerability in org.apache.httpcomponents:httpclient

  http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unsp…

  httpcomponents-client org.apache.httpcomponents:httpclient httpcomponents-client commons-httpclient Debian Ubuntu Maven
  Oct 27, 2015

Revision history

1. 2026-08-02 #7

   Neue Updates von Oracle Linux aufgenommen

2. 2024-09-17 #6

   Neue Updates von IBM aufgenommen

3. 2024-05-06 #5

   Neue Updates von Dell aufgenommen

4. 2020-11-04 #4

   Neue Updates von SUSE aufgenommen

5. 2015-10-14 #3

   New remediations available

6. 2015-10-05 #1

   Initial Release

7. 2015-10-05 #2

   Version nicht vorhanden

References

• Red Hat Bugzilla Bug 1261538 vom 2015-10-05
  https://bugzilla.redhat.com/show_bug.cgi?id=1261538
• Ubuntu Security Notice USN-2769-1 vom 2015-10-15
  http://www.ubuntu.com/usn/usn-2769-1/
• SUSE Security Update SUSE-SU-2020:3149-1 vom 2020-11-04
  https://lists.suse.com/pipermail/sle-security-updates/2020-November/007689.html
• SUSE Security Update SUSE-SU-2020:3151-1 vom 2020-11-04
  https://lists.suse.com/pipermail/sle-security-updates/2020-November/007690.html
• SUSE Security Update SUSE-SU-2020:3152-1 vom 2020-11-04
  https://lists.suse.com/pipermail/sle-security-updates/2020-November/007692.html
• Dell Security Advisory DSA-2024-208 vom 2024-05-07
  https://www.dell.com/support/kbdoc/000224800/dsa-2024-=
• IBM Security Bulletin 7168816 vom 2024-09-18
  https://www.ibm.com/support/pages/node/7168816
• Oracle Linux Security Advisory ELSA-2026-43218 vom 2026-08-01
  https://linux.oracle.com/errata/ELSA-2026-43218.html