PT-2023-22029 · Trustwave+2 · Modsecurity+2
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Trustwave ModSecurity versions 3.0.5 through 3.0.8
Description
The issue allows a denial of service, causing worker crash and unresponsiveness. This occurs because some inputs cause a segfault in the
Transaction class for certain configurations.Recommendations
For Trustwave ModSecurity versions 3.0.5 through 3.0.8, update to version 3.0.9 to resolve the issue.
Exploit
Correção
DoS
Resource Exhaustion
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Modsecurity
Red Os