6.4

CVE-2014-8566

The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Uninett ≫ Mod Auth Mellon Version <= 0.8.0
Oracle ≫ Linux Version6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.73% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://linux.oracle.com/errata/ELSA-2014-1803.html
http://rhn.redhat.com/errata/RHSA-2014-1803.html
http://secunia.com/advisories/62094
http://secunia.com/advisories/62125
https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html
Patch
Vendor Advisory
https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.8.1
Patch
Vendor Advisory