Lucene search
Gentoo FoundationMGASA-2024-0081HistoryMar 22, 2024 - 3:19 a.m.
Updated apache-mod_auth_openidc packages fix security vulnerability
2024-03-2203:19:51
Gentoo Foundation
advisories.mageia.org
25
apache
openidc
input validation
security vulnerability
dos attack
cve-2024-24814
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Missing input validation on mod_auth_openidc_session_chunks cookie value makes the server vulnerable to DoS attack. (CVE-2024-24814)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | apache-mod_auth_openidc | < 2.4.13.2-1.1 | apache-mod_auth_openidc-2.4.13.2-1.1.mga9 |
Related
osv
osv
libapache2-mod-auth-openidc - security update
2024-03-05 00:00:00
CVE-2024-24814
2024-02-13 19:15:11
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0081)
2024-04-05 00:00:00
Debian: Security Advisory (DLA-3751-1)
2024-03-06 00:00:00
Fedora: Security Advisory for mod_auth_openidc (FEDORA-2024-3c0f2a2771)
2024-03-02 00:00:00
prion
prion
Input validation
2024-02-13 19:15:00
cvelist
cvelist
nvd
nvd
CVE-2024-24814
2024-02-13 19:15:11
cve
cve
CVE-2024-24814
2024-02-13 19:15:11
nessus
nessus
Fedora 39 : mod_auth_openidc (2024-3c0f2a2771)
2024-03-02 00:00:00
SUSE SLES12 Security Update : apache2-mod_auth_openidc (SUSE-SU-2024:0758-1)
2024-03-07 00:00:00
debiancve
debiancve
CVE-2024-24814
2024-02-13 19:15:11
ubuntucve
ubuntucve
CVE-2024-24814
2024-02-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-04-22 11:32:49
fedora
fedora
[SECURITY] Fedora 39 Update: mod_auth_openidc-2.4.15.3-1.fc39
2024-03-02 00:41:13
redhatcve
redhatcve
CVE-2024-24814
2024-02-13 22:38:04
debian
debian
[SECURITY] [DLA 3751-1] libapache2-mod-auth-openidc security update
2024-03-05 18:16:33
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Related for MGASA-2024-0081