CVE-2021-20718: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• Openidc Mod Auth Openidc: from 2.4.0, up to and including 2.4.7
• Oracle Essbase: before 21.3 (fixed in 21.3)

Published 2021-05-20. Last modified 2026-06-17.