Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-3183

medium · 5

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

5
CVSS
73.3%
EPSS (exploit prob.)
99th
EPSS percentile
2015-07-20
Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

CWE-17CWE-20

Affected products

VendorProductAffected versions
apachehttp_server>= 2.2.0, < 2.2.31
apachehttp_server>= 2.4.0, < 2.4.16

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-3183