Debian/modsecurity-apache: medium 6.5
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If S
Action: Upgrade modsecurity-apache to 2.9.11-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.11-1 | - |
Fixed versions
| 2.9.11-1 |
Sources
- osv: DEBIAN-CVE-2025-52891#Debian:14/modsecurity-apache
- https://security-tracker.debian.org/tracker/CVE-2025-52891
published · modified · JSON