Medium ELSA-2025-12838 1 CVE

Moderate: mod_security security update (Oracle Linux 9)

Published Aug 5, 2025 · Updated Aug 5, 2025

Ecosystem: Oracle Linux

Summary

[2.9.6-2.1]
- Resolves: RHEL-100102 - CVE-2025-48866 mod_security: ModSecurity
Denial of Service Vulnerability

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	mod_security	0:2.9.6-2.el9_6.1
Oracle Linux · 9	mod_security-mlogc	0:2.9.6-2.el9_6.1

Vulnerabilities 1

High 7.5

CVE-2025-48866

ModSecurity has possible DoS vulnerability in sanitiseArg action

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeAr…

owasp-modsecurity ModSecurity modsecurity-apache mod_security Debian Ubuntu Azure Linux

Jun 2, 2025