mod-security-users

[mod-security-users] mod_security2 incomplete output

[Joachim Z. <j.z...@ep...>]

Hi,
i have started to test mod_security2 on openSuSE 42.3 some time ago. I 
ran into a problem with incomplete output of the webpages (on Apache 
with mod_php7). Once i disabled mod_security2, everything is fine again. 
I tested the same on a new Server with newer openSuSE Release (15.1) 
with all updates installed. Now i use php-fpm to serve PHP Content. I 
still encounter the same problem. The error occures not on every Request 
but on ~ 10%. I can reproduce by refreshing the same script. Also, the 
Apache child process crashes with a Segmentation fault. Tested with 
Apache prefork and event MPM.

System:
     - openSuSE 15.1
     - Apache 2.4.33
     - mod_security2 2.9.2

I currently use the default configuration without any activated rules 
and "SecRuleEngine DetectionOnly"

Thank you

Re: [mod-security-users] mod_security2 incomplete output

[Chaim S. <ch...@ch...>]

Please feel free to open a ticket on ModSecurity's github page.

On Wed, Jun 19, 2019 at 3:48 AM Joachim Zauner <j.z...@ep...> wrote:

> Hi,
> i have started to test mod_security2 on openSuSE 42.3 some time ago. I
> ran into a problem with incomplete output of the webpages (on Apache
> with mod_php7). Once i disabled mod_security2, everything is fine again.
> I tested the same on a new Server with newer openSuSE Release (15.1)
> with all updates installed. Now i use php-fpm to serve PHP Content. I
> still encounter the same problem. The error occures not on every Request
> but on ~ 10%. I can reproduce by refreshing the same script. Also, the
> Apache child process crashes with a Segmentation fault. Tested with
> Apache prefork and event MPM.
>
> System:
>      - openSuSE 15.1
>      - Apache 2.4.33
>      - mod_security2 2.9.2
>
> I currently use the default configuration without any activated rules
> and "SecRuleEngine DetectionOnly"
>
> Thank you
>
>
>
>
>
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>


-- 
-- 
Chaim Sanders
http://www.ChaimSanders.com