Alerts This Week
Warning Icon 1 1,375
Alerts This Week
Warning Icon 1 1,375

Ubuntu 25.04 USN-7567-1 critical: modsecurity-apache DoS issues

ubuntu
Calendar Grey June 16, 2025
Dist Ubuntu Esm H88
Debian DSA-4999-1 tackles critical vulnerabilities in OpenSSL, affecting several distributions. Immediate patching advised.
Several security issues were fixed in ModSecurity.

Summary

Several security issues were fixed in ModSecurity.

Software Description:

- modsecurity-apache: Tighten web applications security for Apache

Details:

Simon Studer discovered that ModSecurity incorrectly handled certain

JSON objects. An attacker could possibly use this issue to cause a denial

of service. (CVE-2025-47947)

It was discovered that ModSecurity incorrectly handled requests when

parsing certain form data. An attacker could possibly use this issue to

cause a denial of service. (CVE-2025-48866)

Topics%20covered

Topics Covered

security advisory denial of service critical software issue ubuntu modsecurity-apache

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libapache2-mod-security2        2.9.8-1.1ubuntu0.1

Ubuntu 24.10
  libapache2-mod-security2        2.9.7-1ubuntu0.24.10.1

Ubuntu 24.04 LTS
  libapache2-mod-security2        2.9.7-1ubuntu0.24.04.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  libapache2-mod-security2        2.9.5-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  libapache2-mod-security2        2.9.3-1ubuntu0.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libapache2-mod-security2        2.9.2-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libapache2-mod-security2        2.9.0-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libapache2-modsecurity          2.9.0-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  libapache2-mod-security2        2.7.7-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libapache2-modsecurity          2.7.7-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7567-1

CVE-2025-47947, CVE-2025-48866

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7567-1

Topics%20covered

Topics Covered

security advisory denial of service critical software issue ubuntu modsecurity-apache

Package Information

https://launchpad.net/ubuntu/+source/modsecurity-apache/2.9.8-1.1ubuntu0.1
https://launchpad.net/ubuntu/+source/modsecurity-apache/2.9.7-1ubuntu0.24.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here