Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-3891

Fixed in a distro release EPSS 2%CVSS 7.5

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

Published 2025-04-29 · CVE record · OSV

Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7

Distro releases

ReleasePackageFixed in
AlmaLinux 8cjose0.6.1-4.module_el8.10.0+3881+234adf82
AlmaLinux 8cjose0.6.1-4.module_el8.9.0+3631+0ced13d7
AlmaLinux 8cjose-devel0.6.1-4.module_el8.9.0+3631+0ced13d7
AlmaLinux 8cjose-devel0.6.1-4.module_el8.10.0+3881+234adf82
AlmaLinux 8mod_auth_openidc2.4.9.4-8.module_el8.10.0+3988+526f0275
AlmaLinux 9mod_auth_openidc2.4.10-1.el9_6.2
Chainguardapache20
Debian 11libapache2-mod-auth-openidc2.4.9.4-0+deb11u6
Debian 12libapache2-mod-auth-openidc2.4.12.3-2+deb12u4
Debian 13libapache2-mod-auth-openidc2.4.14.2-1
Debian 14libapache2-mod-auth-openidc2.4.14.2-1
Red Hat Enterprise Linux 8cjose0:0.6.1-4.module+el8.10.0+21813+b5444eb8
Red Hat Enterprise Linux 8cjose-debuginfo0:0.6.1-4.module+el8.10.0+21813+b5444eb8
Red Hat Enterprise Linux 8cjose-debugsource0:0.6.1-4.module+el8.10.0+21813+b5444eb8
Red Hat Enterprise Linux 8cjose-devel0:0.6.1-4.module+el8.10.0+21813+b5444eb8
Red Hat Enterprise Linux 8mod_auth_openidc0:2.4.9.4-8.module+el8.10.0+23056+decb09b1
Red Hat Enterprise Linux 8mod_auth_openidc-debuginfo0:2.4.9.4-8.module+el8.10.0+23056+decb09b1
Red Hat Enterprise Linux 8mod_auth_openidc-debugsource0:2.4.9.4-8.module+el8.10.0+23056+decb09b1
Red Hat Enterprise Linux 9mod_auth_openidc0:2.4.10-1.el9_6.2
Red Hat Enterprise Linux 9mod_auth_openidc-debuginfo0:2.4.10-1.el9_6.2
Red Hat Enterprise Linux 9mod_auth_openidc-debugsource0:2.4.10-1.el9_6.2
Red Hat rhel aus 8.2cjose0:0.6.1-3.module+el8.2.0+19461+3a40b6ee
Red Hat rhel aus 8.2cjose-debuginfo0:0.6.1-3.module+el8.2.0+19461+3a40b6ee
Red Hat rhel aus 8.2cjose-debugsource0:0.6.1-3.module+el8.2.0+19461+3a40b6ee
Red Hat rhel aus 8.2cjose-devel0:0.6.1-3.module+el8.2.0+19461+3a40b6ee
Red Hat rhel aus 8.2mod_auth_openidc0:2.4.9.4-2.module+el8.2.0+23265+3c1fe64f
Red Hat rhel aus 8.2mod_auth_openidc-debuginfo0:2.4.9.4-2.module+el8.2.0+23265+3c1fe64f
Red Hat rhel aus 8.2mod_auth_openidc-debugsource0:2.4.9.4-2.module+el8.2.0+23265+3c1fe64f
Red Hat rhel aus 8.4cjose0:0.6.1-3.module+el8.4.0+19462+14bde120
Red Hat rhel aus 8.4cjose-debuginfo0:0.6.1-3.module+el8.4.0+19462+14bde120
Red Hat rhel aus 8.4cjose-debugsource0:0.6.1-3.module+el8.4.0+19462+14bde120
Red Hat rhel aus 8.4cjose-devel0:0.6.1-3.module+el8.4.0+19462+14bde120
Red Hat rhel aus 8.4mod_auth_openidc0:2.4.9.4-1.module+el8.4.0+23303+cbb1cd49.2
Red Hat rhel aus 8.4mod_auth_openidc-debuginfo0:2.4.9.4-1.module+el8.4.0+23303+cbb1cd49.2
Red Hat rhel aus 8.4mod_auth_openidc-debugsource0:2.4.9.4-1.module+el8.4.0+23303+cbb1cd49.2
Red Hat rhel aus 8.6cjose0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel aus 8.6cjose-debuginfo0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel aus 8.6cjose-debugsource0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel aus 8.6cjose-devel0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel aus 8.6mod_auth_openidc0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel aus 8.6mod_auth_openidc-debuginfo0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel aus 8.6mod_auth_openidc-debugsource0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel e4s 8.6cjose0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel e4s 8.6cjose-debuginfo0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel e4s 8.6cjose-debugsource0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel e4s 8.6cjose-devel0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel e4s 8.6mod_auth_openidc0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel e4s 8.6mod_auth_openidc-debuginfo0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel e4s 8.6mod_auth_openidc-debugsource0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel e4s 8.8cjose0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel e4s 8.8cjose-debuginfo0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel e4s 8.8cjose-debugsource0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel e4s 8.8cjose-devel0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel e4s 8.8mod_auth_openidc0:2.4.9.4-1.module+el8.8.0+23294+baa6f818.2
Red Hat rhel e4s 8.8mod_auth_openidc-debuginfo0:2.4.9.4-1.module+el8.8.0+23294+baa6f818.2
Red Hat rhel e4s 8.8mod_auth_openidc-debugsource0:2.4.9.4-1.module+el8.8.0+23294+baa6f818.2
Red Hat rhel e4s 9.0mod_auth_openidc0:2.4.9.4-1.el9_0.3
Red Hat rhel e4s 9.0mod_auth_openidc-debuginfo0:2.4.9.4-1.el9_0.3
Red Hat rhel e4s 9.0mod_auth_openidc-debugsource0:2.4.9.4-1.el9_0.3
Red Hat rhel e4s 9.2mod_auth_openidc0:2.4.9.4-1.el9_2.3
Red Hat rhel e4s 9.2mod_auth_openidc-debuginfo0:2.4.9.4-1.el9_2.3
Red Hat rhel e4s 9.2mod_auth_openidc-debugsource0:2.4.9.4-1.el9_2.3
Red Hat rhel eus 9.4mod_auth_openidc0:2.4.9.4-4.el9_4.2
Red Hat rhel eus 9.4mod_auth_openidc-debuginfo0:2.4.9.4-4.el9_4.2
Red Hat rhel eus 9.4mod_auth_openidc-debugsource0:2.4.9.4-4.el9_4.2
Red Hat rhel tus 8.6cjose0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel tus 8.6cjose-debuginfo0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel tus 8.6cjose-debugsource0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel tus 8.6cjose-devel0:0.6.1-3.module+el8.6.0+19463+7d2e1f9c
Red Hat rhel tus 8.6mod_auth_openidc0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel tus 8.6mod_auth_openidc-debuginfo0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel tus 8.6mod_auth_openidc-debugsource0:2.4.9.4-1.module+el8.6.0+23293+9b46d3da.2
Red Hat rhel tus 8.8cjose0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel tus 8.8cjose-debuginfo0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel tus 8.8cjose-debugsource0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel tus 8.8cjose-devel0:0.6.1-3.module+el8.8.0+19464+578f4546
Red Hat rhel tus 8.8mod_auth_openidc0:2.4.9.4-1.module+el8.8.0+23294+baa6f818.2
Red Hat rhel tus 8.8mod_auth_openidc-debuginfo0:2.4.9.4-1.module+el8.8.0+23294+baa6f818.2
Red Hat rhel tus 8.8mod_auth_openidc-debugsource0:2.4.9.4-1.module+el8.8.0+23294+baa6f818.2
Rocky Linux 8cjose0:0.6.1-4.module+el8.9.0+1384+4b58c166
Rocky Linux 8mod_auth_openidc0:2.4.9.4-8.module+el8.10.0+1976+99abe5eb
Rocky Linux 9mod_auth_openidc0:2.4.10-1.el9_6.2
SUSE Enterprise Storage 7.1apache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise Module for Server Applications 15 SP6apache2-mod_auth_openidc2.3.8-150600.16.11.1
SUSE Linux Enterprise Module for Server Applications 15 SP6apache2-mod_auth_openidc2.4.17.1-150600.16.14.1
SUSE Linux Enterprise Module for Server Applications 15 SP7apache2-mod_auth_openidc2.4.17.1-150600.16.14.1
SUSE Linux Enterprise Module for Server Applications 15 SP7apache2-mod_auth_openidc2.3.8-150600.16.11.1
SUSE Linux Enterprise Server 12 SP5-LTSSapache2-mod_auth_openidc2.4.0-7.22.1
SUSE Linux Enterprise Server 15 SP3-LTSSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise Server 15 SP4-LTSSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise Server 15 SP5-LTSSapache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5apache2-mod_auth_openidc2.4.0-7.22.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3apache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4apache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5apache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Manager Proxy 4.3apache2-mod_auth_openidc2.3.8-150100.3.34.1
SUSE Manager Server 4.3apache2-mod_auth_openidc2.3.8-150100.3.34.1
Ubuntu 16.04 LTSlibapache2-mod-auth-openidcno fix
Ubuntu 18.04 LTSlibapache2-mod-auth-openidcno fix
Ubuntu 20.04 LTSlibapache2-mod-auth-openidcno fix
Ubuntu 22.04 LTSlibapache2-mod-auth-openidcno fix
Ubuntu 24.04 LTSlibapache2-mod-auth-openidcno fix
Ubuntu 25.10libapache2-mod-auth-openidcno fix
Ubuntu 26.04 LTSlibapache2-mod-auth-openidcno fix
Ubuntu 26.10libapache2-mod-auth-openidcno fix
Wolfiapache20
openSUSE Leap 15.6apache2-mod_auth_openidc2.4.17.1-150600.16.14.1
openSUSE Leap 15.6apache2-mod_auth_openidc2.3.8-150600.16.11.1