Package · Ubuntu

libapache-session-perl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Critical 9.1

CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially wit…

CHORNY Apache::Session libapache-session-perl libapache-session-perl Debian Ubuntu

May 8, 2026
Critical 9.1

CVE-2026-5081

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_ID environment variable for the session id. The UNIQUE_ID var…

CHORNY Apache::Session::Generate::ModUniqueId libapache-session-perl libapache-session-perl Debian Ubuntu

May 6, 2026
Critical 9.1

CVE-2025-40931

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id generator returns a MD5 hash seeded with the built-in rand() function, the epoch …

CHORNY Apache::Session::Generate::MD5 libapache-session-perl libapache-session-perl Debian Ubuntu

Mar 5, 2026