CVE-2014-8566

Related Files

Red Hat Security Advisory 2014-1803-01

Posted Nov 5, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-1803-01 - mod_auth_mellon provides a SAML 2.0 authentication module for the Apache HTTP Server. An information disclosure flaw was found in mod_auth_mellon's session handling that could lead to sessions overlapping in memory. A remote attacker could potentially use this flaw to obtain data from another user's session. It was found that uninitialized data could be read when processing a user's logout request. By attempting to log out, a user could possibly cause the Apache HTTP Server to crash.

tags | advisory, remote, web, info disclosure

systems | linux, redhat

advisories | CVE-2014-8566, CVE-2014-8567

SHA-256 | bace11b023f51bec854dbba74876c1b28bf5a08128b9b8731372afea85f15b8c

Download | Favorite | View