CVE-2014-8567
- Source
- https://cve.org/CVERecord?id=CVE-2014-8567
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-8567.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2014-8567
- Downstream
- Withdrawn
- 2026-01-27T04:13:26.658560Z
- Published
- 2014-11-14T15:59:02Z
- Modified
- 2026-01-27T04:13:26.658560Z
- Summary
- [none]
- Details
-
The modauthmellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
- References
-
- http://linux.oracle.com/errata/ELSA-2014-1803.html
- http://rhn.redhat.com/errata/RHSA-2014-1803.html
- http://secunia.com/advisories/62094
- http://secunia.com/advisories/62125
- https://github.com/UNINETT/mod_auth_mellon/commit/0f5b4fd860fa7e3a6c47201637aab05395f32647
- https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html