/[Apache-SVN]
ViewVC logotype

Revision 1657261


Jump to revision: Previous Next
Author: covener
Date: Wed Feb 4 14:44:23 2015 UTC (9 years, 3 months ago)
Changed paths: 2
Log Message:
  *) SECURITY: CVE-2015-0228 (cve.mitre.org)
     mod_lua: A maliciously crafted websockets PING after a script
     calls r:wsupgrade() can cause a child process crash.
     [Edward Lu <Chaosed0 gmail.com>]

Discovered by Guido Vranken <guidovranken gmail.com>

Submitted by: Edward Lu
Committed by: covener



Changed paths

Path Details
Directoryhttpd/httpd/trunk/CHANGES modified , text changed
Directoryhttpd/httpd/trunk/modules/lua/lua_request.c modified , text changed

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26