modsecurity vulnerabilities (Ubuntu)
22 vulnerabilities.
-
modsecurityUbuntu [GHSA-5m93-4h75-3p2w: @rxGlobal PCRE2 error handling: match-limit fail-open and invalid-pattern crash] No score -
modsecurityUbuntu [GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules] No score -
modsecurityUbuntu [GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules] No score -
modsecurityUbuntu [GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS] No score -
modsecurityUbuntu [GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing] No score -
modsecurityUbuntu [GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer] No score -
modsecurityUbuntu [GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion] No score -
modsecurityUbuntu ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass 8.6 High -
modsecurityUbuntu ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture 5.8 Medium -
modsecurityUbuntu ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators 8.2 High -
modsecurityUbuntu libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings 8.2 High -
modsecurityUbuntu ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure 6.9 Medium -
modsecurityUbuntu ModSecurity empty XML tag causes segmentation fault 6.5 Medium -
modsecurityUbuntu Libmodsecurity3 has possible bypass of encoded HTML entities 7.9 High -
modsecurityUbuntu A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via... 7.5 High -
modsecurityUbuntu WAF bypass of the ModSecurity v3 release line 8.6 High -
modsecurityUbuntu Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity. 7.5 High -
modsecurityUbuntu Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash... 7.5 High -
modsecurityUbuntu In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... 7.5 High -
modsecurityUbuntu ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects... 7.5 High -
modsecurityUbuntu ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string... 5.3 Medium -
modsecurityUbuntu An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead... 7.5 High