CVE-2014-8567

mod_auth_mellon < 0.8.1 - Denial of Service via Crafted Logout Request

Title source: llm
STIX 2.1

Description

The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.

References (6)

Core 6
Core References
Third Party Advisory x_refsource_confirm
http://linux.oracle.com/errata/ELSA-2014-1803.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1803.html
Permissions Required, Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62094
Permissions Required, Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62125
Vendor Advisory mailing-list x_refsource_mlist
https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html

Scores

EPSS 0.0359
EPSS Percentile 88.2%

Details

CWE
CWE-399
Status published
Products (7)
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_server 6.0
redhat/enterprise_linux_server_aus 6.6
redhat/enterprise_linux_server_eus 6.6
redhat/enterprise_linux_server_tus 6.6
redhat/enterprise_linux_workstation 6.0
uninett/mod_auth_mellon < 0.8.1
Published Nov 14, 2014
Tracked Since Feb 18, 2026