https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:14:47 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:4597 <p><strong>Affected:</strong> AlmaLinux:8: cjose, AlmaLinux:8: cjose-devel, AlmaLinux:8: mod_auth_openidc</p> <p>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.</p> <p>Security Fix(es):</p> <p>* mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: cjose, AlmaLinux:8: cjose-devel, AlmaLinux:8: mod_auth_openidc</p> <p>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.</p> <p>Security Fix(es):</p> <p>* mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:4597 https://cve.radiocsirt.org/vuln/bdu:2025-10948 bdu:2025-10948 https://cve.radiocsirt.org/vuln/bdu:2025-10948 https://cve.radiocsirt.org/vuln/euvd-2026-331196 EUVD-2026-331196 https://cve.radiocsirt.org/vuln/euvd-2026-331196 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3891 <p>A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.</p> <p>A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3891 https://cve.radiocsirt.org/vuln/ghsa-v96g-5j57-774c <p>A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.</p> <p>A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.</p> https://cve.radiocsirt.org/vuln/ghsa-v96g-5j57-774c https://cve.radiocsirt.org/vuln/rhsa-2025:10002 <p>mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled</p> <p>mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10002 https://cve.radiocsirt.org/vuln/rhsa-2025:4597 <p>mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled</p> <p>mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled</p> https://cve.radiocsirt.org/vuln/rhsa-2025:4597 https://cve.radiocsirt.org/vuln/suse-su-2025:01585-1 <p>Security update for apache2-mod_auth_openidc</p> <p>Security update for apache2-mod_auth_openidc</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01585-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3891 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libapache2-mod-auth-openidc, Ubuntu:18.04:LTS: libapache2-mod-auth-openidc, Ubuntu:20.04:LTS: libapache2-mod-auth-openidc, Ubuntu:22.04:LTS: libapache2-mod-auth-openidc, Ubuntu:24.04:LTS: libapache2-mod-auth-openidc, Ubuntu:25.10: libapache2-mod-auth-openidc, Ubuntu:26.04:LTS: libapache2-mod-auth-openidc</p> <p>A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libapache2-mod-auth-openidc, Ubuntu:18.04:LTS: libapache2-mod-auth-openidc, Ubuntu:20.04:LTS: libapache2-mod-auth-openidc, Ubuntu:22.04:LTS: libapache2-mod-auth-openidc, Ubuntu:24.04:LTS: libapache2-mod-auth-openidc, Ubuntu:25.10: libapache2-mod-auth-openidc, Ubuntu:26.04:LTS: libapache2-mod-auth-openidc</p> <p>A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3891 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0956 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0956