CVE-2023-38285
Fixed in a distro release EPSS <1%
Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
Products: owasp modsecurity
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | modsecurity | 3.0.10-r0 |
| Debian 12 | modsecurity | 3.0.9-1+deb12u1 |
| Debian 13 | modsecurity | 3.0.10-1 |
| Debian 14 | modsecurity | 3.0.10-1 |
| SUSE Package Hub 15 SP4 | modsecurity | 3.0.10-bp154.2.3.1 |
| SUSE Package Hub 15 SP5 | modsecurity | 3.0.10-bp155.3.3.1 |
| Ubuntu 20.04 LTS | modsecurity | no fix |
| Ubuntu 22.04 LTS | modsecurity | no fix |
| Ubuntu 24.04 LTS | modsecurity | no fix |
| Wolfi | modsecurity | 3.0.10-r0 |
| openSUSE Leap 15.4 | modsecurity | 3.0.10-bp154.2.3.1 |
| openSUSE Leap 15.5 | modsecurity | 3.0.10-bp155.3.3.1 |