Lucene search

K
freebsdFreeBSD9DFB63B8-8F36-11E2-B34D-000C2957946C
HistoryMay 27, 2013 - 12:00 a.m.

www/mod_security -- NULL pointer dereference DoS

2013-05-2700:00:00
vuxml.freebsd.org
16

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.3%

SecurityFocus reports:

When ModSecurity receives a request body with a size bigger than the
value set by the β€œSecRequestBodyInMemoryLimit” and with a β€œContent-Type”
that has no request body processor mapped to it, ModSecurity will
systematically crash on every call to β€œforceRequestBodyVariable”.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmod_security<Β 2.7.3UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.3%