CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2015-3249
Severity
CRITICAL
CVSS
9.8
EPSS
5.44%
Apache
Original NVD Description
The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary code via vectors related to the (1) frame_handlers array or (2) set_dynamic_table_size function.
Related CVEs
Other vulnerabilities affecting the same vendor(s)