CVE:CVE-2015-0253
CNNVD:CNNVD-201507-656
Apache HTTP Server是美国阿帕奇软件（Apache Software）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.4.12版本的server/protocol.c文件中的‘read_request_line’函数存在安全漏洞，该漏洞源于程序没有初始化结构体成员。将ErrorDocument 400指向本地URL路径并开启INCLUDES过滤器时，没有正确处理Error。远程攻击者可通过发送缺少安装方法（启用INCLUDES过滤器并包含指定本地URI的ErrorDocument 400指令）的请求利用该漏洞造成拒绝服务（空指针逆向引用和进程崩溃）。
solution:Upgrade apache http_server to a higher version than 2.4.12,and avoid the version 2.4.12; Upgrade apple mac_os_x to a higher version than 10.10.4,and avoid the version 10.10.4; Upgrade apple mac_os_x_server to a higher version than 5.0.3,and avoid the version 5.0.3; Upgrade oracle linux to a higher version than 7,and avoid the version 7; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3