NVD Vulnerability Detail

CVE-2015-0228

Summary	The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
Publication Date	March 8, 2015, 11:59 a.m.
Registration Date	Jan. 26, 2021, 2:43 p.m.
Last Update	Nov. 21, 2024, 11:22 a.m.

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:apache:http_server::::::::			2.4.12

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts:::

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:apple:mac_os_x:10.10.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:5.0.3:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:opensuse:opensuse:13.2:::::::*

Related information, measures and tools

No	URL	タグ
1	http://advisories.mageia.org/MGASA-2015-0099.html
2	http://advisories.mageia.org/MGASA-2015-0099.html
3	http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
4	http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
5	http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
6	http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
7	http://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html
8	http://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html
9	http://rhn.redhat.com/errata/RHSA-2015-1666.html
10	http://rhn.redhat.com/errata/RHSA-2015-1666.html
11	http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES	Vendor Advisory
12	http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES	Vendor Advisory
13	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
14	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
15	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
16	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
17	http://www.securityfocus.com/bid/73041
18	http://www.securityfocus.com/bid/73041
19	http://www.securityfocus.com/bid/91787
20	http://www.securityfocus.com/bid/91787
21	http://www.securitytracker.com/id/1032967
22	http://www.securitytracker.com/id/1032967
23	http://www.ubuntu.com/usn/USN-2523-1
24	http://www.ubuntu.com/usn/USN-2523-1
25	https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef
26	https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef
27	https://github.com/apache/httpd/commit/78eb3b9235515652ed141353d98c239237030410
28	https://github.com/apache/httpd/commit/78eb3b9235515652ed141353d98c239237030410
29	https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E
30	https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E
31	https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E
32	https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E
33	https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
34	https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
35	https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E
36	https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E
37	https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
38	https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
39	https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E
40	https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E
41	https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E
42	https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E
43	https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E
44	https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E
45	https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E
46	https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E
47	https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
48	https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
49	https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
50	https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
51	https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
52	https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
53	https://support.apple.com/HT205219
54	https://support.apple.com/HT205219
55	https://support.apple.com/kb/HT205031
56	https://support.apple.com/kb/HT205031

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

Apache HTTP Server の mod_lua モジュールにおけるサービス運用妨害 (DoS) の脆弱性

Title	Apache HTTP Server の mod_lua モジュールにおけるサービス運用妨害 (DoS) の脆弱性
Summary	Apache HTTP Server の mod_lua モジュールの lua_request.c 内の lua_websocket_read 関数には、サービス運用妨害 (子プロセスのクラッシュ) 状態にされる脆弱性が存在します。
Possible impacts	第三者により、Lua スクリプトが wsupgrade 関数を呼び出した後に巧妙に細工された WebSocket Ping フレームを送信されることで、サービス運用妨害 (子プロセスのクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 4, 2015, midnight
Registration Date	March 10, 2015, 2:56 p.m.
Last Update	July 27, 2016, 4:25 p.m.

Affected System

Apache Software Foundation

Apache HTTP Server 2.4.12 まで

オラクル

Oracle Enterprise Manager Ops Center 12.1.4

Oracle Enterprise Manager Ops Center 12.2.2

Oracle Enterprise Manager Ops Center 12.3.2

アップル

Apple Mac OS X 10.10 から 10.10.4

Apple Mac OS X 10.9.5

macOS Server (旧 OS X Server) 5.0.3 未満 (OS X Yosemite v10.10.5 以降)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-0228	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0228
National Vulnerability Database (NVD)
2	CVE-2015-0228	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0228

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006	http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
2	APPLE-SA-2015-09-16-4 OS X Server 5.0.3	http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
Apple Security Updates
3	HT205031	http://support.apple.com/en-us/HT205031
4	HT205219	https://support.apple.com/en-us/HT205219
Apple セキュリティアップデート
5	HT205031	http://support.apple.com/ja-jp/HT205031
6	HT205219	http://support.apple.com/ja-jp/HT205219
Changes with Apache
7	Apache 2.4.13	http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES
GitHub
8	*) SECURITY: CVE-2015-0228 (cve.mitre.org)	https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef
Oracle Critical Patch Update
9	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
10	Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2016verbose-2881721.html
Oracle Technology Network
11	Oracle Solaris Third Party Bulletin - October 2015	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
SECURITY BLOG
12	July 2016 Critical Patch Update Released	http://blogs.oracle.com/security/entry/july_2016_critical_patch_update

その他

No	Name	URL
JVN
1	JVNVU#99970459	http://jvn.jp/vu/JVNVU99970459/index.html
関連文書
2	MGASA-2015-0099	http://advisories.mageia.org/MGASA-2015-0099.html

Change Log

No	Changed Details	Date of change
0	[2015年03月10日] 掲載 [2015年04月09日] 参考情報：関連文書 (MGASA-2015-0099) を追加 [2015年08月31日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT205031) を追加ベンダ情報：アップル (APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006) を追加 [2015年10月05日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (APPLE-SA-2015-09-16-4 OS X Server 5.0.3) を追加ベンダ情報：アップル (HT205219) を追加参考情報：JVN (JVNVU#99970459) を追加 [2015年11月06日] ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - October 2015) を追加 [2016年07月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices) を追加ベンダ情報：オラクル (July 2016 Critical Patch Update Released) を追加	Feb. 17, 2018, 10:37 a.m.