Red Hat Security Advisory 2014-1803-01 – mod_auth_mellon provides a SAML 2.0 authentication module for the Apache HTTP Server. An information disclosure flaw was found in mod_auth_mellon’s session handling that could lead to sessions overlapping in memory. A remote attacker could potentially use this flaw to obtain data from another user’s session. It was found that uninitialized data could be read when processing a user’s logout request. By attempting to log out, a user could possibly cause the Apache HTTP Server to crash.