CyberRota Analysis
AI-GeneratedThe mod_auth_openidc module for Apache 2.x is vulnerable to an out-of-bounds read and write in its state-cookie parser, potentially allowing attackers to exploit this flaw for unauthorized access or data leakage. The issue is resolved in version 2.4.19.4, and users of affected Apache servers should prioritize upgrading to this version to mitigate risks, as no in-product workarounds are available. Organizations relying on OpenID Connect for authentication should take immediate action to secure their systems against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a value-less token is rejected. No in-product workarounds are available. As a stop-gap, an upstream reverse proxy or WAF that rejects or normalizes malformed `Cookie` headers (tokens lacking `=`) can reduce exposure, but upgrading is the recommended remediation.