ISOMAN

CVE

CVE-2014-8566

The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."

Severity
MEDIUM
CVSS
6.4
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource

References

  1. http://linux.oracle.com/errata/ELSA-2014-1803.html
  2. http://rhn.redhat.com/errata/RHSA-2014-1803.html
  3. http://secunia.com/advisories/62094
  4. http://secunia.com/advisories/62125
  5. https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.8.1
  6. https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html
  7. http://linux.oracle.com/errata/ELSA-2014-1803.html
  8. http://rhn.redhat.com/errata/RHSA-2014-1803.html
  9. http://secunia.com/advisories/62094
  10. http://secunia.com/advisories/62125
  11. https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.8.1
  12. https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html