CVE の説明

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

CVE の情報

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1（0〜100%）の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。

EPSS First.org

参考資料

http://marc.info/?l=bugtraq&m=144493176821532&w=2
Tags : vendor-advisory, x_refsource_HP

http://rhn.redhat.com/errata/RHSA-2016-2056.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html
Tags : vendor-advisory, x_refsource_SUSE

http://httpd.apache.org/security/vulnerabilities_24.html
Tags : x_refsource_CONFIRM

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2016-0061.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
Tags : x_refsource_CONFIRM

https://security.gentoo.org/glsa/201610-02
Tags : vendor-advisory, x_refsource_GENTOO

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2015-1667.html
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2016-0062.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.apache.org/dist/httpd/CHANGES_2.4
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2015-1666.html
Tags : vendor-advisory, x_refsource_REDHAT

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id/1032967
Tags : vdb-entry, x_refsource_SECTRACK

http://rhn.redhat.com/errata/RHSA-2015-1668.html
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2015-2661.html
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2016-2055.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.ubuntu.com/usn/USN-2686-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://marc.info/?l=bugtraq&m=144493176821532&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://www.securityfocus.com/bid/75963
Tags : vdb-entry, x_refsource_BID

http://www.debian.org/security/2015/dsa-3325
Tags : vendor-advisory, x_refsource_DEBIAN

https://access.redhat.com/errata/RHSA-2015:2659
Tags : vendor-advisory, x_refsource_REDHAT

https://github.com/apache/httpd/commit/e427c41257957b57036d5a549b260b6185d1dd73
Tags : x_refsource_CONFIRM

https://puppet.com/security/cve/CVE-2015-3183
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/bid/91787
Tags : vdb-entry, x_refsource_BID

https://access.redhat.com/errata/RHSA-2015:2660
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2016-2054.html
Tags : vendor-advisory, x_refsource_REDHAT

https://support.apple.com/kb/HT205031
Tags : x_refsource_CONFIRM

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789
Tags : x_refsource_CONFIRM

http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
Tags : vendor-advisory, x_refsource_APPLE

https://support.apple.com/HT205219
Tags : x_refsource_CONFIRM

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
Tags : x_refsource_CONFIRM

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Tags : x_refsource_CONFIRM

https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://github.com/apache/httpd/commit/a6027e56924bb6227c1fdbf6f91e7e2438338be6
Tags : x_refsource_CONFIRM

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

CWE-ID	弱点名	出典
CWE-17	Category : DEPRECATED: Code This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.
CWE-20	Improper Input Validation The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

日付	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	7.34%	–	–
2022-04-03	–	–	7.34%	–	–
2023-02-26	–	–	7.34%	–	–
2023-03-12	–	–	–	7.37%	–
2023-09-17	–	–	–	6.46%	–
2023-10-22	–	–	–	5.54%	–
2023-12-17	–	–	–	4.13%	–
2024-01-07	–	–	–	5.5%	–
2024-02-11	–	–	–	5.41%	–
2024-02-18	–	–	–	7.18%	–
2024-06-02	–	–	–	6.16%	–
2024-12-22	–	–	–	6.52%	–
2025-01-19	–	–	–	6.52%	–
2025-03-02	–	–	–	6.7%	–
2025-03-09	–	–	–	6.7%	–
2025-03-18	–	–	–	–	40.98%
2025-03-30	–	–	–	–	37.36%
2025-05-01	–	–	–	–	23.82%
2025-05-04	–	–	–	–	37.36%
2025-06-01	–	–	–	–	23.82%
2025-06-04	–	–	–	–	38.44%
2025-07-01	–	–	–	–	25.82%
2025-07-04	–	–	–	–	38.44%
2025-07-29	–	–	–	–	40.77%
2025-07-30	–	–	–	–	38.98%
2025-08-01	–	–	–	–	27.54%
2025-08-04	–	–	–	–	38.98%
2025-09-09	–	–	–	–	36.34%
2025-10-01	–	–	–	–	25.54%
2025-10-04	–	–	–	–	38.1%
2025-10-27	–	–	–	–	36.34%
2025-10-28	–	–	–	–	38.1%
2025-11-01	–	–	–	–	25.54%
2025-11-04	–	–	–	–	38.1%
2025-12-01	–	–	–	–	21.44%
2025-12-04	–	–	–	–	33.28%
2025-12-07	–	–	–	–	32.87%
2025-12-11	–	–	–	–	28.34%
2025-12-27	–	–	–	–	26.79%
2025-12-28	–	–	–	–	28.34%
2026-01-01	–	–	–	–	17.49%
2026-01-04	–	–	–	–	28.34%
2026-03-01	–	–	–	–	17.49%
2026-03-08	–	–	–	–	28.34%
2026-04-12	–	–	–	–	28.34%
2026-05-31	–	–	–	–	24.12%

日付	パーセンタイル
2022-02-06	81%
2022-04-03	92%
2023-02-26	93%
2023-03-12	93%
2023-09-17	93%
2023-10-22	92%
2023-12-17	91%
2024-01-07	92%
2024-02-11	93%
2024-02-18	94%
2024-06-02	94%
2024-12-22	94%
2025-01-19	94%
2025-03-02	94%
2025-03-09	94%
2025-03-18	97%
2025-03-30	97%
2025-05-01	96%
2025-05-04	97%
2025-06-01	96%
2025-06-04	97%
2025-07-01	96%
2025-07-04	97%
2025-07-29	97%
2025-07-30	97%
2025-08-01	96%
2025-08-04	97%
2025-09-09	97%
2025-10-01	96%
2025-10-04	97%
2025-10-27	97%
2025-10-28	97%
2025-11-01	96%
2025-11-04	97%
2025-12-01	96%
2025-12-04	97%
2025-12-07	97%
2025-12-11	96%
2025-12-27	96%
2025-12-28	96%
2026-01-01	95%
2026-01-04	96%
2026-03-01	95%
2026-03-08	96%
2026-04-12	97%
2026-05-31	96%

CVE-2015-3183

CVE の説明

CVE の情報

関連する弱点

メトリクス

EPSS

EPSSスコア

EPSSパーセンタイル

関連製品

構成 0

参考資料

CVE-2015-3183 : 詳細

CVE-2015-3183

CVE の説明

CVE の情報

関連する弱点

メトリクス

EPSS

EPSSスコア

EPSSパーセンタイル

関連製品

構成 0

参考資料