Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2299-1
HistoryJul 04, 2024 - 8:41 a.m.

Security update for apache2-mod_auth_openidc

2024-07-0408:41:57
Google
osv.dev
apache2-mod_auth_openidc
security update
dos issue

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

Low

This update for apache2-mod_auth_openidc fixes the following issues:

  • CVE-2024-24814: Fixed a bug that can led to DoS when OIDCSessionType client-cookie is set and a crafted Cookie header is supplied. (bsc#1219911)

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

Low