What is RHSA-2015:1666?

RHSA-2015:1666 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: httpd24-httpd security update

Which CVE IDs does RHSA-2015:1666 cover?

RHSA-2015:1666 covers the following CVE IDs: CVE-2015-0228, CVE-2015-0253, CVE-2015-3183, CVE-2015-3185. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2015:1666?

RHSA-2015:1666 has a CVSS v3 base score of 3.7, published by Red Hat Product Security.

Which products are affected by RHSA-2015:1666?

RHSA-2015:1666 affects 77 products, including: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6); Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7); Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5); Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6); Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1); and others — see the full list on the advisory page.

RHSA-2015:1666MediumCVSS 3.7

Red Hat Security Advisory: httpd24-httpd security update

Vendor

Red Hat Product Security

Published

August 24, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (4)

CVE-2015-0228 →CVE-2015-0253 →CVE-2015-3183 →CVE-2015-3185 →

📋 Description

CVE-2015-0228 — httpd: Possible mod_lua crash due to websocket bug CVE-2015-0253 — httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path CVE-2015-3183 — httpd: HTTP request smuggling attack against chunked request parser CVE-2015-3185 — httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4

🎯 Affected products77

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-0:2.4.12-4.el6.2.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-0:2.4.12-4.el6.2.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
httpd24-httpd-0:2.4.12-4.el6.2.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
httpd24-httpd-0:2.4.12-4.el6.2.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
httpd24-httpd-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
httpd24-httpd-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
httpd24-httpd-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
httpd24-httpd-0:2.4.12-6.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
httpd24-httpd-0:2.4.12-6.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
httpd24-httpd-0:2.4.12-6.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-0:2.4.12-6.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
httpd24-httpd-0:2.4.12-6.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
httpd24-httpd-0:2.4.12-6.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-debuginfo-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-debuginfo-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
httpd24-httpd-debuginfo-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
httpd24-httpd-debuginfo-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
httpd24-httpd-debuginfo-0:2.4.12-6.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
httpd24-httpd-debuginfo-0:2.4.12-6.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
httpd24-httpd-debuginfo-0:2.4.12-6.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-devel-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-devel-0:2.4.12-4.el6.2.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
+47 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products77

✅ Remediation

🔗 References (7)