CVE-2015-0228
httpd: Possible mod_lua crash due to websocket bug
Severity
LowRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · March 10, 2015
Updated · August 5, 2026
Description
A denial of service flaw was found in the way the mod_lua httpd module processed certain WebSocket Ping requests. A remote attacker could send a specially crafted WebSocket Ping packet that would cause the httpd child process to crash.
Statement
This issue did not affect the version of httpd package as shipped with Red Hat Enterprise Linux 5, 6 and 7.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE not specified