Security Advisory
CVE-2015-0228
5
Vulnerability Description
The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
Published Date
March 8, 2015
Official Source
NIST NVD Advisory