VULNERABILITY INTELLIGENCE

CVE-2014-8566

CVSS score6.4 MEDIUM
EPSS probability2.73%
CISA KEVNot currently listed
Published2014-11-15
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:P

Description

The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references