Lucene search
Veracode Vulnerability DatabaseVERACODE:39669HistoryMar 12, 2023 - 2:29 a.m.
Denial Of Service (DoS)
2023-03-1202:29:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
modsecurity-crs
buster
dos
attacks
vulnerability
remote
attackers
denial of service
repetition
operators
crafted
string
0.004 Low
EPSS
Percentile
74.6%
modsecurity-crs:buster is vulnerable to Denial of Service (DoS) attacks. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators.
| CPE | Name | Operator | Version |
|---|---|---|---|
| modsecurity-crs:buster | eq | 3.1.0-1+deb10u1 | |
| modsecurity-crs:buster | eq | 3.1.0-1+deb10u1 |
Related
nvd
nvd
CVE-2019-11387
2019-04-21 02:29:00
debiancve
debiancve
CVE-2019-11387
2019-04-21 02:29:00
osv
osv
CVE-2019-11387
2019-04-21 02:29:00
prion
prion
Design/Logic Flaw
2019-04-21 02:29:00
cvelist
cvelist
CVE-2019-11387
2019-04-21 01:14:49
cve
cve
CVE-2019-11387
2019-04-21 02:29:00
ubuntucve
ubuntucve
CVE-2019-11387
2019-04-21 00:00:00
myhack58
myhack58