libapache2-mod-auth-openidc vulnerabilities (Ubuntu)
17 vulnerabilities.
-
libapache2-mod-auth-openidcUbuntu mod_auth_openidc has out-of-bounds read and write in state cookie parsing 7.5 High -
libapache2-mod-auth-openidcUbuntu Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 7.5 High -
libapache2-mod-auth-openidcUbuntu mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data 8.2 High -
libapache2-mod-auth-openidcUbuntu Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc 7.5 High -
libapache2-mod-auth-openidcUbuntu mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied 7.5 High -
libapache2-mod-auth-openidcUbuntu Open Redirect in oidc_validate_redirect_url() 4.7 Medium -
libapache2-mod-auth-openidcUbuntu URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc 4.7 Medium -
libapache2-mod-auth-openidcUbuntu XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc 3.1 Low -
libapache2-mod-auth-openidcUbuntu Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc 5.9 Medium -
libapache2-mod-auth-openidcUbuntu Open Redirect in oidc_validate_redirect_url() 4.7 Medium -
libapache2-mod-auth-openidcUbuntu Format string bug in the Redis cache implementation 5.3 Medium -
libapache2-mod-auth-openidcUbuntu CVE-2021-20718 affecting package mod_auth_openidc for versions less than 2.4.14.2-1 7.5 High -
libapache2-mod-auth-openidcUbuntu mod_auth_openidc before version 2.4.0.1 is vulnerable to a None 5.8 Medium -
libapache2-mod-auth-openidcUbuntu ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS).... 6.1 Medium -
libapache2-mod-auth-openidcUbuntu Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka... 7.5 High -
libapache2-mod-auth-openidcUbuntu The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module... 8.6 High -
libapache2-mod-auth-openidcUbuntu The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module... 8.6 High