Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2013:1156
HistoryAug 13, 2013 - 12:00 a.m.

(RHSA-2013:1156) Moderate: httpd security update

2013-08-1300:00:00
access.redhat.com
22

EPSS

0.927

Percentile

99.0%

JSON

The Apache HTTP Server is a popular web server.

A flaw was found in the way the mod_dav module of the Apache HTTP Server
handled merge requests. An attacker could use this flaw to send a crafted
merge request that contains URIs that are not configured for DAV, causing
the httpd child process to crash. (CVE-2013-1896)

All httpd users should upgrade to these updated packages, which contain a
backported patch to correct this issue. After installing the updated
packages, the httpd daemon will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat5ia64httpd-devel< 2.2.3-82.el5_9httpd-devel-2.2.3-82.el5_9.ia64.rpm
RedHat5s390xmod_ssl< 2.2.3-82.el5_9mod_ssl-2.2.3-82.el5_9.s390x.rpm
RedHat6ppc64httpd-devel< 2.2.15-29.el6_4httpd-devel-2.2.15-29.el6_4.ppc64.rpm
RedHat5i386httpd-debuginfo< 2.2.3-82.el5_9httpd-debuginfo-2.2.3-82.el5_9.i386.rpm
RedHat6s390xhttpd-debuginfo< 2.2.15-29.el6_4httpd-debuginfo-2.2.15-29.el6_4.s390x.rpm
RedHat5x86_64httpd-devel< 2.2.3-82.el5_9httpd-devel-2.2.3-82.el5_9.x86_64.rpm
RedHat6i686httpd-tools< 2.2.15-29.el6_4httpd-tools-2.2.15-29.el6_4.i686.rpm
RedHat6ppc64httpd< 2.2.15-29.el6_4httpd-2.2.15-29.el6_4.ppc64.rpm
RedHat6x86_64httpd< 2.2.15-29.el6_4httpd-2.2.15-29.el6_4.x86_64.rpm
RedHat5s390xhttpd< 2.2.3-82.el5_9httpd-2.2.3-82.el5_9.s390x.rpm
Rows per page:
1-10 of 561

Related

checkpoint_advisories 2
openvas 21
securityvulns 4
cisco 1
f5 2
nessus 37
veracode 1
mageia 2
cve 1
httpd 2
oraclelinux 1
prion 1
debiancve 1
ubuntucve 1
centos 1
cvelist 1
seebug 1
nvd 1
ibm 6
redhat 5
freebsd 2
fedora 2
kaspersky 1
ubuntu 1
slackware 1
gentoo 1
suse 1
hackerone 2
osv 1
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_dav MERGE Request Denial of Service (CVE-2013-1896)
2013-09-01 00:00:00
Apache HTTP Server mod_dav MERGE Request Denial of Service - Ver2 (CVE-2013-1896)
2014-12-28 00:00:00
openvas
openvas
CentOS Update for httpd CESA-2013:1156 centos6
2013-08-16 00:00:00
CentOS Update for httpd CESA-2013:1156 centos5
2013-08-16 00:00:00
CentOS Update for httpd CESA-2013:1156 centos6
2013-08-16 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:193 ] apache
2013-07-15 00:00:00
Apache security vulnerabilities
2013-07-15 00:00:00
APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001
2014-02-28 00:00:00
cisco
cisco
Apache HTTP Server MERGE Request Denial of Service Vulnerability
2013-07-11 17:33:19
f5
f5
K14733 : Apache HTTP server vulnerability CVE-2013-1896
2014-12-10 00:00:00
SOL14733 - Apache HTTP server vulnerability CVE-2013-1896
2013-10-04 00:00:00
nessus
nessus
IBM HTTP Server 8.5.0.0 <= 8.5.5.0 / 8.0.0.0 <= 8.0.0.6 / 7.0.0.0 <= 7.0.0.29 / 6.1.0.0 <= 6.1.0.45 (227047)
2021-01-04 00:00:00
CentOS 5 / 6 : httpd (CESA-2013:1156)
2013-08-14 00:00:00
RHEL 5 / 6 : httpd (RHSA-2013:1156)
2013-08-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:40
mageia
mageia
Updated apache packages fix CVE-2013-1896
2013-07-26 15:34:30
Updated apache packages fix security vulnerabilities
2013-07-26 15:36:22
cve
cve
CVE-2013-1896
2013-07-10 20:55:01
httpd
httpd
Apache Httpd < 2.2.25 : mod_dav crash
2013-03-07 00:00:00
Apache Httpd < 2.4.6 : mod_dav crash
2013-03-07 00:00:00
oraclelinux
oraclelinux
httpd security update
2013-08-13 00:00:00
prion
prion
Design/Logic Flaw
2013-07-10 20:55:00
debiancve
debiancve
CVE-2013-1896
2013-07-10 20:55:01
ubuntucve
ubuntucve
CVE-2013-1896
2013-07-10 00:00:00
centos
centos
httpd, mod_ssl security update
2013-08-13 17:32:49
cvelist
cvelist
CVE-2013-1896
2013-07-10 20:00:00
seebug
seebug
Apache HTTP Server mod_dav.c 拒绝服务漏洞(CVE-2013-1896)
2013-07-17 00:00:00
nvd
nvd
CVE-2013-1896
2013-07-10 20:55:01
ibm
ibm
Security Bulletin: Potential Security exposure in IBM HTTP Server CVE-2013-1896 PM89996
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.31
2018-06-15 06:59:10
redhat
redhat
(RHSA-2013:1134) Moderate: httpd security update
2013-08-05 15:32:30
(RHSA-2013:1133) Moderate: httpd security update
2013-08-05 15:27:06
(RHSA-2013:1207) Moderate: Red Hat JBoss Enterprise Application Platform 6.1.1 update
2013-09-04 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2013-06-21 00:00:00
apache24 -- several vulnerabilities
2013-07-11 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: httpd-2.4.6-2.fc19
2013-08-09 17:11:09
[SECURITY] Fedora 18 Update: httpd-2.4.6-2.fc18
2013-08-16 23:03:32
kaspersky
kaspersky
KLA10068 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2013-07-15 00:00:00
slackware
slackware
[slackware-security] httpd
2013-08-06 07:20:43
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
suse
suse
Security update for apache2 (important)
2014-09-02 21:04:17
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
osv
osv
apache2-2.4.23-4.1 on GA media
2024-06-15 00:00:00

EPSS

0.927

Percentile

99.0%

JSON
Related for RHSA-2013:1156
checkpoint_advisories2openvas21securityvulns4cisco1f52nessus37veracode1mageia2cve1httpd2oraclelinux1prion1debiancve1ubuntucve1centos1cvelist1seebug1nvd1ibm6redhat5freebsd2fedora2kaspersky1ubuntu1slackware1gentoo1suse1hackerone2osv1