Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | libapache2-mod-auth-openidc | 2.4.9.4-0+deb11u6 |
Vulnerabilities 1
-
High 7.5
Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled
A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistent…