Lucene search

K
cve[email protected]CVE-2014-8566
HistoryNov 15, 2014 - 9:59 p.m.

CVE-2014-8566

2014-11-1521:59:06
CWE-200
web.nvd.nist.gov
19
cve-2014-8566
mod_auth_mellon
information security
denial of service
nvd
segmentation fault
session overflow

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a “session overflow” involving “sessions overlapping in memory.”

Affected configurations

NVD
Node
uninettmod_auth_mellonRange0.8.0
Node
oraclelinuxMatch6

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%