CVE-2015-3249: Buffer Overflow
The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary code via vectors related to the (1) framehandlers array or (2) setdynamictablesize function.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2015-3249.
What is the severity of CVE-2015-3249?
CVE-2015-3249 has a severity rating of critical.
What is the affected software for CVE-2015-3249?
The affected software for CVE-2015-3249 is Apache Traffic Server 5.3.0.
How can the vulnerability CVE-2015-3249 be exploited?
The vulnerability CVE-2015-3249 can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code.
Are there any references for CVE-2015-3249?
Yes, the references for CVE-2015-3249 are: http://mail-archives.us.apache.org/mod_mbox/www-announce/201507.mbox/%3CCABF6JR37mWzDmXDqRQwRUXiojBZrhidndnsY1ZgmcZv-o7-a+g@mail.gmail.com%3E, http://www.securityfocus.com/bid/101631, https://yahoo-security.tumblr.com/post/122883273670/apache-traffic-server-http2-fuzzing