CVE-2021-20718

Опубликовано: 20 мая 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.

Ссылки

https://github.com/zmartzone/mod_auth_openidc
Product
Third Party Advisory
https://jvn.jp/en/jp/JVN49704918/index.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HJK366TLFEOIYWTHQSZO24MSDPBXHJU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FV4KYMQWPS3I2QPW2C253MLIAFGBZPLK/
https://www.oracle.com/security-alerts/cpujan2022.html
Third Party Advisory
https://www.zmartzone.eu/
Vendor Advisory
https://github.com/zmartzone/mod_auth_openidc
Product
Third Party Advisory
https://jvn.jp/en/jp/JVN49704918/index.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HJK366TLFEOIYWTHQSZO24MSDPBXHJU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FV4KYMQWPS3I2QPW2C253MLIAFGBZPLK/
https://www.oracle.com/security-alerts/cpujan2022.html
Third Party Advisory
https://www.zmartzone.eu/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openidc:mod_auth_openidc:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.7 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*

Версия до 21.3 (исключая)

EPSS

Процентиль: 83%

0.01849

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2021-20718

CVSS3: 7.5

ubuntu

больше 4 лет назад

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.

CVE-2021-20718

CVSS3: 7.5

redhat

больше 4 лет назад

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.

CVE-2021-20718

CVSS3: 7.5

msrc

около 4 лет назад

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.

CVE-2021-20718

CVSS3: 7.5

debian

больше 4 лет назад

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a de ...

SUSE-SU-2021:1900-1

suse-cvrf

больше 4 лет назад

Security update for apache2-mod_auth_openidc

EPSS

Процентиль: 83%

0.01849

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400