Description

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

Remediation

References

CVE-2015-3183

Related Vulnerabilities

Jboss EAP Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-10212)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (3.4.8)

OpenSSL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2021-3711)

Oracle JRE CVE-2013-1478 Vulnerability (CVE-2013-1478)

WordPress Plugin Service Area Postcode Checker Cross-Site Scripting (2.0.8)

Severity

Medium

Classification

CVE-2015-3183

Tags

Missing Update Known Vulnerabilities