CVE-2014-8566 Information disclosure in n/a
Remote attackers can obtain sensitive information or cause a denial of service via session overflow in the mod_auth_mellon module.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-8566?
CVE-2014-8566 is a medium-severity vulnerability in Oracle Linux, published on 15 Nov 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."
Weakness: CWE-200
Which versions are affected by CVE-2014-8566?
It affects 2 products.
Products include Oracle Linux, Uninett Mod Auth Mellon.
How do I fix CVE-2014-8566?
Upgrade to a fixed version.
Is CVE-2014-8566 being exploited?
There is no known exploitation of CVE-2014-8566 in the wild and no public exploit code.
Other vulnerabilities in Oracle Linux
Sources
Also known as DEBIAN-CVE-2014-8566, GHSA-4cw9-fccf-p75x.