libapache-session-perl

3 results · Feed

• Critical 9.1
  CVE-2013-10075

  Apache::Session versions through 1.94 for Perl re-creates deleted sessions

  Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially wit…

  CHORNY Apache::Session libapache-session-perl libapache-session-perl Debian Ubuntu
  May 8, 2026
• Critical 9.1
  CVE-2026-5081

  Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure

  Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_ID environment variable for the session id. The UNIQUE_ID var…

  CHORNY Apache::Session::Generate::ModUniqueId libapache-session-perl libapache-session-perl Debian Ubuntu
  May 6, 2026
• Critical 9.1
  CVE-2025-40931

  Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id

  Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id generator returns a MD5 hash seeded with the built-in rand() function, the epoch …

  CHORNY Apache::Session::Generate::MD5 libapache-session-perl libapache-session-perl Debian Ubuntu
  Mar 5, 2026