Vulnerability Details CVE-2021-20718
mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/zmartzone/mod_auth_openidc
- https://jvn.jp/en/jp/JVN49704918/index.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HJK366TLFEOIYWTHQSZO24MSDPBXHJU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FV4KYMQWPS3I2QPW2C253MLIAFGBZPLK/
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.zmartzone.eu/
- https://github.com/zmartzone/mod_auth_openidc
- https://jvn.jp/en/jp/JVN49704918/index.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HJK366TLFEOIYWTHQSZO24MSDPBXHJU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FV4KYMQWPS3I2QPW2C253MLIAFGBZPLK/
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.zmartzone.eu/
Products affected by CVE-2021-20718
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.0
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.0.1
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.0.2
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.0.3
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.0.4
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.1
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.2
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.2.1
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.3
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.4
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.4.1
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.5
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.6
-
cpe:2.3:a:openidc:mod_auth_openidc:2.4.7
-
cpe:2.3:a:oracle:essbase:11.1.2.4.47
-
cpe:2.3:a:oracle:essbase:21.1
-
cpe:2.3:a:oracle:essbase:21.2
-
cpe:2.3:o:fedoraproject:fedora:33
-
cpe:2.3:o:fedoraproject:fedora:34