Debian/libapache2-mod-auth-mellon: unknown
The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
Action: Upgrade libapache2-mod-auth-mellon to 0.9.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
published · modified · JSON