Homepage

mod_md

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the mod_md package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
NULL Pointer Dereference

*
  • M
Information Exposure

*
  • M
DEPRECATED (Duplicate): HTTP response splitting

*
  • M
Buffer Over-read

*
  • M
Improper Null Termination

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
External Control of File Name or Path

*
  • H
Out-of-bounds Write

*
  • H
Improper Neutralization

<1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
  • H
Authentication Bypass by Primary Weakness

<1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
  • H
Integer Overflow or Wraparound

<1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
  • H
Information Exposure

<1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
  • M
Improper Access Control

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
Reachable Assertion

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
Improper Authentication

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Improper Input Validation

*
  • M
Improper Output Neutralization for Logs

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
Memory Leak

*
  • H
Inclusion of Functionality from Untrusted Control Sphere

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • H
NULL Pointer Dereference

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • H
Improper Encoding or Escaping of Output

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • H
Improper Input Validation

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • H
Improper Encoding or Escaping of Output

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • H
Improper Encoding or Escaping of Output

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • H
Resource Exhaustion

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • L
HTTP Response Splitting

*
  • M
HTTP Request Smuggling

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
Out-of-bounds Read

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
Resource Exhaustion

<1:2.0.8-8.module+el8.9.0+19080+567b90f8
  • M
HTTP Response Splitting

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
HTTP Response Splitting

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
HTTP Response Splitting

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
HTTP Request Smuggling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Out-of-bounds Write

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
HTTP Request Smuggling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Allocation of Resources Without Limits or Throttling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Information Exposure

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Allocation of Resources Without Limits or Throttling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Integer Overflow or Wraparound

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Integer Overflow or Wraparound

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
HTTP Request Smuggling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Out-of-bounds Write

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Use of Uninitialized Resource

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
HTTP Request Smuggling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Out-of-bounds Write

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
Out-of-bounds Write

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Server-Side Request Forgery (SSRF)

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
Server-Side Request Forgery (SSRF)

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • L
NULL Pointer Dereference

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
Server-Side Request Forgery (SSRF)

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Out-of-bounds Write

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Out-of-bounds Read

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
NULL Pointer Dereference

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
NULL Pointer Dereference

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Resource Exhaustion

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Allocation of Resources Without Limits or Throttling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Insufficient Session Expiration

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Open Redirect

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Resource Exhaustion

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
HTTP Request Smuggling

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Use After Free

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Use After Free

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Buffer Overflow

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Resource Exhaustion

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
Resource Exhaustion

<1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
  • M
Missing Initialization of a Variable

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Open Redirect

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Improper Access Control

<0:2.4.37-16.module+el8.1.0+4134+e6bad0ed
  • M
Path Equivalence

<0:2.4.37-16.module+el8.1.0+4134+e6bad0ed
  • H
Resource Exhaustion

<0:2.4.37-12.module+el8.0.0+4096+eb40e6da
  • M
Cross-site Scripting (XSS)

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
Improper Access Control

<0:2.4.37-11.module+el8.0.0+2969+90015743
  • H
Execution with Unnecessary Privileges

<0:2.4.37-11.module+el8.0.0+2969+90015743
  • M
Improper Input Validation

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • H
Out-of-Bounds

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
NULL Pointer Dereference

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Out-of-Bounds

<1:2.0.8-8.module+el8.3.0+6814+67d1e611
  • M
Improper Authentication

*