CVE-2023-28882

Summary

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.trustwave.com/en-us/resources/security-resources/software-updates/announcing-modsecurity-version-309/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.trustwave.com/en-us/resources/security-resources/software-updates/announcing-modsecurity-version-309/

• ←Previous
• Next→