Search for packages
| purl | pkg:deb/debian/modsecurity-apache@2.8.0-2~bpo70%2B1 |
| Next non-vulnerable version | 2.9.7-1+deb12u2 |
| Latest non-vulnerable version | 2.9.7-1+deb12u2 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fc2s-mxh1-yfeh
Aliases: CVE-2023-24021 |
modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass |
Affected by 3 other vulnerabilities. |
|
VCID-kg7a-8fqh-mffc
Aliases: CVE-2021-42717 |
security update |
Affected by 6 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-qrsw-p6vk-pydk
Aliases: CVE-2025-54571 |
mod_security: ModSecurity Content-Type Override Vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-sm3m-cydd-w3av
Aliases: CVE-2025-48866 |
mod_security: ModSecurity Denial of Service Vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-tyyt-k2cb-dygb
Aliases: CVE-2025-47947 |
modsecurity: ModSecurity Has Possible DoS Vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-y8ty-2cp5-y3gm
Aliases: CVE-2022-48279 |
mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4s75-8asy-wyb1 | The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header. |
CVE-2013-2765
|
| VCID-5gw3-jywd-2qb2 | security update |
CVE-2013-5705
|