CVE-2024-24814

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 13, 2024
Updated: Mar 21, 2024
CWE ID 400

Summary

CVE-2024-24814 is a vulnerability affecting mod_auth_openidc, an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server. The vulnerability allows for a denial of service (DoS) attack due to missing input validation on the mod_auth_openidc_session_chunks cookie value. By manipulating the value of the cookie to a large integer, such as 99999999, an attacker can cause the server to become unresponsive or crash. This vulnerability has been addressed in version 2.4.15.2 of the module, and users are advised to upgrade to mitigate the risk. No known workarounds are available for this vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-24814 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options