mod_session

Direct Vulnerabilities

Known vulnerabilities in the mod_session package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Expired Pointer Dereference	<0:2.4.69-1.amzn2023.0.2
H Deployment of Wrong Handler	<0:2.4.69-1.amzn2023.0.2
H Use After Free	<0:2.4.69-1.amzn2023.0.2
H Integer Overflow or Wraparound	<0:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<0:2.4.69-1.amzn2023.0.2
H Improper Privilege Management	<0:2.4.69-1.amzn2023.0.2
H Incorrect Calculation of Buffer Size	<0:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<0:2.4.69-1.amzn2023.0.2
H Incorrect Implementation of Authentication Algorithm	<0:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<0:2.4.69-1.amzn2023.0.2
H Server-Side Request Forgery (SSRF)	<0:2.4.69-1.amzn2023.0.2
H Improper Cross-boundary Removal of Sensitive Data	<0:2.4.69-1.amzn2023.0.2
H Path Equivalence	<0:2.4.69-1.amzn2023.0.2
H HTTP Request Smuggling	<0:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<0:2.4.69-1.amzn2023.0.2
H Files or Directories Accessible to External Parties	<0:2.4.69-1.amzn2023.0.2
H Authentication Bypass	<0:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<0:2.4.69-1.amzn2023.0.2
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.68-1.amzn2023.0.1
M Expired Pointer Dereference	<0:2.4.68-1.amzn2023.0.1
M Buffer Underflow	<0:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Directory Traversal	<0:2.4.68-1.amzn2023.0.1
M Incorrect Privilege Assignment	<0:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Cross-site Scripting (XSS)	<0:2.4.68-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<0:2.4.67-1.amzn2023.0.1
H Out-of-bounds Read	<0:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<0:2.4.67-1.amzn2023.0.1
H Information Exposure	<0:2.4.67-1.amzn2023.0.1
H Buffer Over-read	<0:2.4.67-1.amzn2023.0.1
H CRLF Injection	<0:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<0:2.4.67-1.amzn2023.0.1
H Improper Null Termination	<0:2.4.67-1.amzn2023.0.1
H External Control of File Name or Path	<0:2.4.67-1.amzn2023.0.1
H Out-of-bounds Write	<0:2.4.67-1.amzn2023.0.1
H Information Exposure	<0:2.4.66-1.amzn2023.0.1
H Improper Neutralization	<0:2.4.66-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<0:2.4.66-1.amzn2023.0.1
M Incorrect Check of Function Return Value	<0:2.4.65-1.amzn2023.0.1
H Memory Leak	<0:2.4.64-1.amzn2023.0.1
H HTTP Request Smuggling	<0:2.4.64-1.amzn2023.0.1
H Server-Side Request Forgery (SSRF)	<0:2.4.64-1.amzn2023.0.1
H Improper Access Control	<0:2.4.64-1.amzn2023.0.1
H Reachable Assertion	<0:2.4.64-1.amzn2023.0.1
H Improper Output Neutralization for Logs	<0:2.4.64-1.amzn2023.0.1
H CRLF Injection	<0:2.4.64-1.amzn2023.0.1
H Exposure of Resource to Wrong Sphere	<0:2.4.62-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H Inclusion of Functionality from Untrusted Control Sphere	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H Information Exposure	<0:2.4.61-1.amzn2023
H Improper Input Validation	<0:2.4.61-1.amzn2023
H NULL Pointer Dereference	<0:2.4.61-1.amzn2023
M HTTP Response Splitting	<0:2.4.59-2.amzn2023
M HTTP Request Smuggling	<0:2.4.59-2.amzn2023
H Resource Exhaustion	<0:2.4.58-1.amzn2023
H Resource Exhaustion	<0:2.4.58-1.amzn2023
H Out-of-bounds Read	<0:2.4.58-1.amzn2023
H HTTP Response Splitting	<0:2.4.56-1.amzn2023
H HTTP Response Splitting	<0:2.4.56-1.amzn2023
H HTTP Response Splitting	<0:2.4.55-1.amzn2023
H HTTP Request Smuggling	<0:2.4.55-1.amzn2023
H Out-of-bounds Write	<0:2.4.55-1.amzn2023
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Information Exposure	<0:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<0:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<0:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<0:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Read	<0:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Use of Uninitialized Resource	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H Server-Side Request Forgery (SSRF)	<0:2.4.54-3.amzn2023.0.4

Vulnerability

Vulnerable Version

Expired Pointer Dereference

<0:2.4.69-1.amzn2023.0.2