CVE-2023-24021 | Severity.io

Description

Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.

Related CPE's

trustwave

Vulnerable

Vulnerable

References

https://github.com/SpiderLabs/ModSecurity/pull/2857

Issue TrackingPatch

https://github.com/SpiderLabs/ModSecurity/pull/2857/commits/4324f0ac59f8225aa44bc5034df60dbeccd1d334

Patch

https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.7

Release Notes

https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/

https://github.com/SpiderLabs/ModSecurity/pull/2857

Issue TrackingPatch

https://github.com/SpiderLabs/ModSecurity/pull/2857/commits/4324f0ac59f8225aa44bc5034df60dbeccd1d334

Patch

https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.7

Release Notes

https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/

Weaknesses

[email protected]

Primary

NVD-CWE-Other

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-170

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-20T18:15:18.593Z

2 years ago

Last modified

2025-04-02T15:15:34.637Z

9 months ago