Vulnerability in Uninett Mod Auth Mellon
CVE-2014-8567
The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.
Affected products
- Uninett Mod_auth_mellon
- Redhat Enterprise_linux_desktop — versions 6.0
- Redhat Enterprise_linux_server — versions 6.0
- Redhat Enterprise_linux_server_aus — versions 6.6
- Redhat Enterprise_linux_server_eus — versions 6.6
- Redhat Enterprise_linux_server_tus — versions 6.6
- Redhat Enterprise_linux_workstation — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)