CVE-2014-8567: Critical severity mod_auth_mellon vulnerability
Published Nov 14, 2014
·Updated
The modauthmellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
Affected Software
7 affected components
Uninett Mod Auth Mellon<0.8.1
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server Aus=6.6
redhat Enterprise Linux Server Eus=6.6
redhat Enterprise Linux Server Tus=6.6
redhat Enterprise Linux Workstation=6.0
Event History
Nov 14, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8567?
CVE-2014-8567 has a severity rating that indicates it can lead to a denial of service due to a crash of the Apache HTTP server.
2
How do I fix CVE-2014-8567?
To mitigate CVE-2014-8567, upgrade the mod_auth_mellon module to version 0.8.1 or later.
3
What systems are affected by CVE-2014-8567?
CVE-2014-8567 affects versions of mod_auth_mellon prior to 0.8.1 on various distributions of Red Hat Enterprise Linux.
4
Can CVE-2014-8567 be exploited remotely?
Yes, CVE-2014-8567 can be exploited remotely via crafted logout requests.
5
What kind of attack does CVE-2014-8567 enable?
CVE-2014-8567 enables a denial of service attack that can crash the Apache HTTP server.