CVE-2024-46292

A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOT...

Original description

The description as published by the source.

A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it cannot be reproduced. Also, the product's documentation indicates that it is not guaranteed to be usable with very large values of SecRequestBodyNoFilesLimit (which are required by the claimed issue).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami modsecurity

[{"type":"SEMVER","events":[{"introduced":"3.0.12"},{"fixed":"3.0.13"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2024-46292 modsecurity

References

advisory github.com
advisory modsecurity.org
web github.com
web nvd.nist.gov