From 9c8ed4c0b100b1398019db124b7b81068d359cda Mon Sep 17 00:00:00 2001
From: Florian Roth <florian.roth@bsk-consulting.de>
Date: Tue, 28 Feb 2017 17:53:06 +0100
Subject: [PATCH] Apache segmentation fault rule

---
 rules/web/web_apache_segfault.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 rules/web/web_apache_segfault.yml

diff --git a/rules/web/web_apache_segfault.yml b/rules/web/web_apache_segfault.yml
new file mode 100644
index 000000000..b1aff6153
--- /dev/null
+++ b/rules/web/web_apache_segfault.yml
@@ -0,0 +1,14 @@
+title: Apache Segmentation Fault
+description: Detects a segmentation fault error message caused by a creashing apacke worker process 
+author: Florian Roth
+reference: http://www.securityfocus.com/infocus/1633
+logsource:
+    product: apache
+detection:
+    keywords:
+        - 'exit signal Segmentation Fault'
+    condition: keywords
+falsepositives:
+    - Unknown
+level: high
+