https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:49:05.313312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:5289 ALSA-2024:5289 — Moderate: mod_auth_openidc:2.3 security update 2026-10-04T08:49:05.569617+00:00

Affected: AlmaLinux:8: cjose, AlmaLinux:8: cjose-devel, AlmaLinux:8: mod_auth_openidc

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

Security Fix(es):

* mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-02794 bdu:2024-02794 2026-10-04T08:49:05.569680+00:00 bdu:2024-02794 https://cve.radiocsirt.org/vuln/euvd-2026-228575 EUVD-2026-228575 2026-10-04T08:49:05.569698+00:00 EUVD-2026-228575 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24814 fkie_cve-2024-24814 2026-10-04T08:49:05.569710+00:00

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks cookie value makes the server vulnerable to a denial of service (DoS) attack. An internal security audit has been conducted and the reviewers found that if they manipulated the value of the mod_auth_openidc_session_chunks cookie to a very large integer, like 99999999, the server struggles with the request for a long time and finally gets back with a 500 error. Making a few requests of this kind caused our server to become unresponsive. Attackers can craft requests that would make the server work very hard (and possibly become unresponsive) and/or crash with minimal effort. This issue has been addressed in version 2.4.15.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2024-24814 gsd-2024-24814 2026-10-04T08:49:05.569740+00:00 gsd-2024-24814 https://cve.radiocsirt.org/vuln/oesa-2024-1191 OESA-2024-1191 — mod_auth_openidc security update 2026-10-04T08:49:05.569751+00:00

Affected: openEuler:22.03-LTS: mod_auth_openidc

This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party(RP) to an OpenID Connect Provider(OP). Security Fix(es): mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks cookie value makes the server vulnerable to a denial of service (DoS) attack. An internal security audit has been conducted and the reviewers found that if they manipulated the value of the mod_auth_openidc_session_chunks cookie to a very large integer, like 99999999, the server struggles with the request for a long time and finally gets back with a 500 error. Making a few requests of this kind caused our server to become unresponsive. Attackers can craft requests that would make the server work very hard (and possibly become unresponsive) and/or crash with minimal effort. This issue has been addressed in version 2.4.15.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.(CVE-2024-24814)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13699-1 openSUSE-SU-2024:13699-1 — apache2-mod_auth_openidc-2.4.15.3-1.1 on GA media 2026-10-04T08:49:05.569779+00:00

apache2-mod_auth_openidc-2.4.15.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:0758-1 SUSE-SU-2024:0758-1 — Security update for apache2-mod_auth_openidc 2026-10-04T08:49:05.569796+00:00

Security update for apache2-mod_auth_openidc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-24814 UBUNTU-CVE-2024-24814 2026-10-04T08:49:05.569811+00:00

Affected: Ubuntu:18.04:LTS: libapache2-mod-auth-openidc, Ubuntu:20.04:LTS: libapache2-mod-auth-openidc, Ubuntu:22.04:LTS: libapache2-mod-auth-openidc, Ubuntu:24.04:LTS: libapache2-mod-auth-openidc

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks cookie value makes the server vulnerable to a denial of service (DoS) attack. An internal security audit has been conducted and the reviewers found that if they manipulated the value of the mod_auth_openidc_session_chunks cookie to a very large integer, like 99999999, the server struggles with the request for a long time and finally gets back with a 500 error. Making a few requests of this kind caused our server to become unresponsive. Attackers can craft requests that would make the server work very hard (and possibly become unresponsive) and/or crash with minimal effort. This issue has been addressed in version 2.4.15.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1850 WID-SEC-W-2024-1850 — Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T08:49:05.569842+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.