Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | mod_security | 0:2.9.6-1.el9_4.1 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | mod_security-debuginfo | 0:2.9.6-1.el9_4.1 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | mod_security-debugsource | 0:2.9.6-1.el9_4.1 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | mod_security-mlogc | 0:2.9.6-1.el9_4.1 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | mod_security-mlogc-debuginfo | 0:2.9.6-1.el9_4.1 |
Vulnerabilities 1
-
High 7.5CVE-2025-47947 Public exploit
ModSecurity Has Possible DoS Vulnerability
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2367903
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8917.json
-
report
https://access.redhat.com/security/cve/CVE-2025-47947
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-47947
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-47947
-
article
https://github.com/owasp-modsecurity/ModSecurity/pull/3389
-
article
https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-859r-vvv8-rm8r