ALT-PU-2023-6640

Высокий

ALT-PU-2023-6640: package modsecurity update to version 3.0.10-alt1

Источник

errata.altlinux.org

Дата публикации

27.10.2023

Дата обновления

31.07.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades modsecurity to version 3.0.10-alt1.

Устраненные уязвимости2

CVE-2023-28882

Высокий 7.5

Дата публикации: 28.04.2023

CWE-400

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Ссылки

CVE-2023-28882 https://nvd.nist.gov/vuln/detail/CVE-2023-28882

Ссылки1

ALT-PU-2023-6640 https://errata.altlinux.org/ALT-PU-2023-6640

Связанные уязвимости

openSUSE-SU-2023:0269-1

suse-cvrf

около 3 лет назад

Security update for modsecurity

openSUSE-SU-2023:0257-1

suse-cvrf

около 3 лет назад

Security update for modsecurity

CVE-2023-38285

CVSS3: 7.5

ubuntu

больше 3 лет назад

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.

CVE-2023-38285

CVSS3: 7.5

redhat

больше 3 лет назад

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.

CVE-2023-38285

CVSS3: 7.5

nvd

больше 3 лет назад

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.