CVE-2023-28882
mod_security: a segfault and a resultant crash of a worker process in some configurations with certain inputs
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 28, 2023
Updated · August 9, 2026
Description
A vulnerability was found in Mod Security. When certain inputs are used in certain configurations, this issue can result in a segfault and cause a worker process crash. A high volume of these requests sent quickly can lead to the server becoming slow or unresponsive to legitimate requests.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 · Uncontrolled Resource Consumption