All vulnerabilities

Servers and applications

CVE-2023-28882

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations.

Severity
High 7.5
Published
28 Apr 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.0.9
Sources
NVD

Affected software

SoftwareAffected versions
ModSecurityServers and applications · cpe:a:owasp:modsecurity
  • From 3.0.5 before 3.0.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-28882
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-28882