Lucene search

K
cve[email protected]CVE-2013-4352
HistoryJul 20, 2014 - 11:12 a.m.

CVE-2013-4352

2014-07-2011:12:00
NVD-CWE-Other
web.nvd.nist.gov
551
4
cve-2013-4352
apache
http server
denial of service
mod_cache
cache_storage

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.1%

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

References

Social References

More

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.1%