CVE-2015-3183 in SPARC Enterprise Serverinfo

Summary

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

04/10/2015

Disclosure

07/20/2015

CPE

ready

CVSS

7.5

EPSS

0.28343

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!