Information disclosure in Oracle Linux
CVE-2014-8566
The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."
Vulnerability class: Information Disclosure
EPSS: 0.027 (84.6th percentile) — read the EPSS interpretation.
Affected products
- Oracle Linux — versions 6
- Uninett Mod_auth_mellon
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)