Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-1896
HistoryJul 10, 2013 - 12:00 a.m.

CVE-2013-1896

2013-07-1000:00:00
ubuntu.com
ubuntu.com
20

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.956 High

EPSS

Percentile

99.4%

JSON

mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly
determine whether DAV is enabled for a URI, which allows remote attackers
to cause a denial of service (segmentation fault) via a MERGE request in
which the URI is configured for handling by the mod_dav_svn module, but a
certain href attribute in XML data refers to a non-DAV URI.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchapache2< 2.2.14-5ubuntu8.12UNKNOWN
ubuntu12.04noarchapache2< 2.2.22-1ubuntu1.4UNKNOWN
ubuntu12.10noarchapache2< 2.2.22-6ubuntu2.3UNKNOWN
ubuntu13.04noarchapache2< 2.2.22-6ubuntu5.1UNKNOWN

Related

centos 1
prion 1
cvelist 1
seebug 1
debiancve 1
nessus 37
nvd 1
checkpoint_advisories 2
cve 1
oraclelinux 1
f5 2
mageia 2
httpd 2
openvas 21
ibm 6
cisco 1
redhat 6
securityvulns 4
veracode 1
freebsd 2
slackware 1
fedora 2
kaspersky 1
ubuntu 1
gentoo 1
suse 1
hackerone 2
centos
centos
httpd, mod_ssl security update
2013-08-13 17:32:49
prion
prion
Design/Logic Flaw
2013-07-10 20:55:00
cvelist
cvelist
CVE-2013-1896
2013-07-10 20:00:00
seebug
seebug
Apache HTTP Server mod_dav.c 拒绝服务漏洞(CVE-2013-1896)
2013-07-17 00:00:00
debiancve
debiancve
CVE-2013-1896
2013-07-10 20:55:01
nessus
nessus
Scientific Linux Security Update : httpd on SL5.x, SL6.x i386/x86_64 (20130813)
2013-08-14 00:00:00
Oracle Linux 5 / 6 : httpd (ELSA-2013-1156)
2013-08-14 00:00:00
CentOS 5 / 6 : httpd (CESA-2013:1156)
2013-08-14 00:00:00
nvd
nvd
CVE-2013-1896
2013-07-10 20:55:01
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_dav MERGE Request Denial of Service - Ver2 (CVE-2013-1896)
2014-12-28 00:00:00
Apache HTTP Server mod_dav MERGE Request Denial of Service (CVE-2013-1896)
2013-09-01 00:00:00
cve
cve
CVE-2013-1896
2013-07-10 20:55:01
oraclelinux
oraclelinux
httpd security update
2013-08-13 00:00:00
f5
f5
SOL14733 - Apache HTTP server vulnerability CVE-2013-1896
2013-10-04 00:00:00
K14733 : Apache HTTP server vulnerability CVE-2013-1896
2014-12-10 00:00:00
mageia
mageia
Updated apache packages fix CVE-2013-1896
2013-07-26 15:34:30
Updated apache packages fix security vulnerabilities
2013-07-26 15:36:22
httpd
httpd
Apache Httpd < 2.2.25 : mod_dav crash
2013-03-07 00:00:00
Apache Httpd < 2.4.6 : mod_dav crash
2013-03-07 00:00:00
openvas
openvas
Apache HTTP Server 'mod_dav_svn' Denial of Service Vulnerability - Windows
2013-08-21 00:00:00
Oracle: Security Advisory (ELSA-2013-1156)
2015-10-06 00:00:00
Apache HTTP Server DoS Vulnerability (Jul 2013) - Linux
2021-11-01 00:00:00
ibm
ibm
Security Bulletin: Potential Security exposure in IBM HTTP Server CVE-2013-1896 PM89996
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.31
2018-06-15 06:59:10
cisco
cisco
Apache HTTP Server MERGE Request Denial of Service Vulnerability
2013-07-11 17:33:19
redhat
redhat
(RHSA-2013:1156) Moderate: httpd security update
2013-08-13 00:00:00
(RHSA-2013:1134) Moderate: httpd security update
2013-08-05 15:32:30
(RHSA-2013:1133) Moderate: httpd security update
2013-08-05 15:27:06
securityvulns
securityvulns
[ MDVSA-2013:193 ] apache
2013-07-15 00:00:00
Apache security vulnerabilities
2013-07-15 00:00:00
APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001
2014-02-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:40
freebsd
freebsd
apache24 -- several vulnerabilities
2013-07-11 00:00:00
apache22 -- several vulnerabilities
2013-06-21 00:00:00
slackware
slackware
[slackware-security] httpd
2013-08-06 07:20:43
fedora
fedora
[SECURITY] Fedora 19 Update: httpd-2.4.6-2.fc19
2013-08-09 17:11:09
[SECURITY] Fedora 18 Update: httpd-2.4.6-2.fc18
2013-08-16 23:03:32
kaspersky
kaspersky
KLA10068 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2013-07-15 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
suse
suse
Security update for apache2 (important)
2014-09-02 21:04:17
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.956 High

EPSS

Percentile

99.4%

JSON
Related for UB:CVE-2013-1896
centos1prion1cvelist1seebug1debiancve1nessus37nvd1checkpoint_advisories2cve1oraclelinux1f52mageia2httpd2openvas21ibm6cisco1redhat6securityvulns4veracode1freebsd2slackware1fedora2kaspersky1ubuntu1gentoo1suse1hackerone2