Red Hat Security AdvisoryRHSA-2014:1803
mod_auth_mellon security update
Released 2014-11-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) mod_auth_mellon-0.8.0-3.el6_6
- Red Hat Enterprise Linux Workstation (v. 6) mod_auth_mellon-0.8.0-3.el6_6
Fixes 2 records
Priority MEDIUM 47
The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
CVSS 2.0HIGH 9.4· Network · No auth · Interaction — · EPSS 0.03588 · Published 2014-11-14 · Fixed CWE-399
Priority LOW 34
The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "session…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02731 · Published 2014-11-15 · Fixed CWE-200
