https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T21:10:03.576615+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-3183 CVE-2015-3183 2026-09-29T21:10:04.385194+00:00

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

 https://vulnerability.circl.lu/vuln/usn-2686-1 USN-2686-1 — apache2 vulnerabilities 2026-09-29T21:10:04.385318+00:00

Affected: Ubuntu:14.04:LTS: apache2

It was discovered that the Apache HTTP Server incorrectly parsed chunk headers. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks. (CVE-2015-3183)

It was discovered that the Apache HTTP Server incorrectly handled the ap_some_auth_required API. A remote attacker could possibly use this issue to bypass intended access restrictions. This issue only affected Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-3185)