CVE-2015-0928: libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).

Security readout for executives and security teams

CVE-2015-0928 is a remote denial-of-service issue in libhtp 0.5.15. A crash condition caused by a NULL pointer dereference could interrupt software that relies on this HTTP parsing library. The source bundle does not provide CVSS scoring, confirmed exploitation, or a named fixed version. Exposure is most likely where libhtp 0.5.15 is embedded in services or security tools that parse untrusted HTTP traffic. The bundle does not identify specific downstream products, deployments, or package names, so inventory validation is required. Treat this as a contained availability risk unless affected libhtp deployments sit on critical traffic paths. Prioritize inventory first because the public record lacks severity scoring, affected product mapping, and patch detail. Mitigation focus: Identify systems or applications using libhtp 0.5.15.; Check OISF/libhtp vendor guidance for fixed or recommended versions.; Upgrade or replace affected libhtp builds when vendor guidance identifies a safe version..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.