fedoraproject fedora CVE-2015-5262 vulnerability in Fedora Project and Other Products
Published on October 27, 2015

product logo product logo product logo
http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2015-5262

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2015-5262 are published in these products:

Fedora Project Fedora
 
Canonical Ubuntu Linux
 
Apache Httpclient
 

Exploit Probability

EPSS
0.92%
Percentile
75.93%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.