mod_md-debugsource vulnerabilities

Known vulnerabilities in the mod_md-debugsource package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H CVE-2024-38476	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M CVE-2023-38709	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Improper Resource Shutdown or Release	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M Out-of-bounds Read	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
H Allocation of Resources Without Limits or Throttling	<1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.8.0+1271+9ed9553d
H HTTP Request Smuggling	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
M HTTP Response Splitting	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
M Out-of-bounds Write	<1:2.0.8-8.module+el8.5.0+695+1fa8055e
H Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Use of Uninitialized Resource	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Open Redirect	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Open Redirect	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Cross-site Scripting (XSS)	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Use After Free	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Use After Free	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Resource Exhaustion	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Buffer Overflow	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Session Fixation	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M CVE-2021-30641	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H Server-Side Request Forgery (SSRF)	<1:2.0.8-8.module+el8.4.0+553+7a69454b
H Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Read	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M CVE-2021-33193	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
L NULL Pointer Dereference	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Insufficient Verification of Data Authenticity	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M CVE-2022-30556	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Allocation of Resources Without Limits or Throttling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Allocation of Resources Without Limits or Throttling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M HTTP Request Smuggling	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Out-of-bounds Write	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Integer Overflow or Wraparound	<1:2.0.8-8.module+el8.4.0+553+7a69454b
M Improper Initialization	<1:2.0.8-8.module+el8.4.0+553+7a69454b

Vulnerability

Vulnerable Version

CVE-2024-38476