mod_auth_openidc vulnerabilities (Azure Linux)
7 vulnerabilities.
-
mod_auth_openidcAzure Linux mod_auth_openidc has out-of-bounds read and write in state cookie parsing 7.5 High -
mod_auth_openidcAzure Linux mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data 8.2 High -
mod_auth_openidcAzure Linux Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc 7.5 High -
mod_auth_openidcAzure Linux mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied 7.5 High -
mod_auth_openidcAzure Linux Open Redirect in oidc_validate_redirect_url() 4.7 Medium -
mod_auth_openidcAzure Linux URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc 4.7 Medium -
mod_auth_openidcAzure Linux CVE-2021-20718 affecting package mod_auth_openidc for versions less than 2.4.14.2-1 7.5 High