Denial of Service Vulnerability in Apache HTTP Server's mod_lua Module

CVE-2015-0228 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.

Learn more about our Cis Benchmark Audit For Apache Http Server.