CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1896

mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.334

EPSS Ranking 96.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-1896

Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.10

cpe:2.3:a:apache:http_server:2.2.10
Apache » Http Server » Version: 2.2.11

cpe:2.3:a:apache:http_server:2.2.11
Apache » Http Server » Version: 2.2.12

cpe:2.3:a:apache:http_server:2.2.12
Apache » Http Server » Version: 2.2.13

cpe:2.3:a:apache:http_server:2.2.13
Apache » Http Server » Version: 2.2.14

cpe:2.3:a:apache:http_server:2.2.14
Apache » Http Server » Version: 2.2.15

cpe:2.3:a:apache:http_server:2.2.15
Apache » Http Server » Version: 2.2.15-60

cpe:2.3:a:apache:http_server:2.2.15-60
Apache » Http Server » Version: 2.2.16

cpe:2.3:a:apache:http_server:2.2.16
Apache » Http Server » Version: 2.2.17

cpe:2.3:a:apache:http_server:2.2.17
Apache » Http Server » Version: 2.2.18

cpe:2.3:a:apache:http_server:2.2.18
Apache » Http Server » Version: 2.2.19

cpe:2.3:a:apache:http_server:2.2.19
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.20

cpe:2.3:a:apache:http_server:2.2.20
Apache » Http Server » Version: 2.2.21

cpe:2.3:a:apache:http_server:2.2.21
Apache » Http Server » Version: 2.2.22

cpe:2.3:a:apache:http_server:2.2.22
Apache » Http Server » Version: 2.2.23

cpe:2.3:a:apache:http_server:2.2.23
Apache » Http Server » Version: 2.2.24

cpe:2.3:a:apache:http_server:2.2.24
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4
Apache » Http Server » Version: 2.2.5

cpe:2.3:a:apache:http_server:2.2.5
Apache » Http Server » Version: 2.2.6

cpe:2.3:a:apache:http_server:2.2.6
Apache » Http Server » Version: 2.2.7

cpe:2.3:a:apache:http_server:2.2.7
Apache » Http Server » Version: 2.2.8

cpe:2.3:a:apache:http_server:2.2.8
Apache » Http Server » Version: 2.2.9

cpe:2.3:a:apache:http_server:2.2.9
Apache » Http Server » Version: 2.4.1

cpe:2.3:a:apache:http_server:2.4.1
Apache » Http Server » Version: 2.4.2

cpe:2.3:a:apache:http_server:2.4.2
Apache » Http Server » Version: 2.4.3

cpe:2.3:a:apache:http_server:2.4.3
Apache » Http Server » Version: 2.4.4

cpe:2.3:a:apache:http_server:2.4.4
Apache » Http Server » Version: 2.4.5

cpe:2.3:a:apache:http_server:2.4.5
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0
Redhat » Jboss Enterprise Application Platform » Version: 6.4.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10
Canonical » Ubuntu Linux » Version: 13.04

cpe:2.3:o:canonical:ubuntu_linux:13.04
Opensuse » Opensuse » Version: 11.4

cpe:2.3:o:opensuse:opensuse:11.4
Opensuse » Opensuse » Version: 12.2

cpe:2.3:o:opensuse:opensuse:12.2
Opensuse » Opensuse » Version: 12.3

cpe:2.3:o:opensuse:opensuse:12.3
Redhat » Enterprise Linux » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux:5.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux Desktop » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Eus » Version: 5.9

cpe:2.3:o:redhat:enterprise_linux_eus:5.9
Redhat » Enterprise Linux Eus » Version: 6.4

cpe:2.3:o:redhat:enterprise_linux_eus:6.4
Redhat » Enterprise Linux Server » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux_server:5.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server Aus » Version: 5.9

cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9
Redhat » Enterprise Linux Server Aus » Version: 6.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4
Redhat » Enterprise Linux Workstation » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1896

Products

Pricing

Contact Us