mod_md-debuginfo vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the mod_md-debuginfo package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H CVE-2025-66200	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Improper Neutralization	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Information Exposure	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Improper Authentication	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Reachable Assertion	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Improper Access Control	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Improper Neutralization	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Improper Input Validation	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H NULL Pointer Dereference	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Improper Encoding or Escaping of Output	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Improper Encoding or Escaping of Output	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Improper Encoding or Escaping of Output	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H CVE-2024-38476	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M CVE-2023-38709	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Improper Resource Shutdown or Release	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Out-of-bounds Read	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Allocation of Resources Without Limits or Throttling	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.8.0+1271+9ed9553d
H HTTP Request Smuggling	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
M HTTP Response Splitting	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
M Out-of-bounds Write	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
H Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Use of Uninitialized Resource	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Open Redirect	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Open Redirect	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Cross-site Scripting (XSS)	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Use After Free	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Use After Free	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Resource Exhaustion	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Buffer Overflow	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Session Fixation	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M CVE-2021-30641	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H Server-Side Request Forgery (SSRF)	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Read	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M CVE-2021-33193	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
L NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Insufficient Verification of Data Authenticity	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M CVE-2022-30556	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Allocation of Resources Without Limits or Throttling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Allocation of Resources Without Limits or Throttling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Improper Initialization	<1:2.0.8-8.module+el8.4.0+553+7a69454b

Vulnerability

Vulnerable Version

CVE-2025-66200

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Neutralization

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Information Exposure

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Integer Overflow or Wraparound

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Authentication

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Reachable Assertion

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Access Control

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Neutralization

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Input Validation

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

NULL Pointer Dereference

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Encoding or Escaping of Output

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Encoding or Escaping of Output

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Encoding or Escaping of Output

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

CVE-2024-38476

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

CVE-2023-38709

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Improper Resource Shutdown or Release

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Out-of-bounds Read

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

Allocation of Resources Without Limits or Throttling

<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5

HTTP Request Smuggling

<1:2.0.8-8.module+el8.8.0+1271+9ed9553d

HTTP Request Smuggling

<1:2.0.8-8.module+el8.5.0+695+1fa8055e

HTTP Response Splitting

<1:2.0.8-8.module+el8.5.0+695+1fa8055e

HTTP Request Smuggling

<1:2.0.8-8.module+el8.5.0+695+1fa8055e

Out-of-bounds Write

<1:2.0.8-8.module+el8.5.0+695+1fa8055e

Out-of-bounds Write