CVE-2013-6438

🗓️ 18 Mar 2014 01:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 1766 Views

The dav_xml_get_cdata function in mod_dav module in Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service

Reporter	Title	Published	Views	Family All 155
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.33	8 Sep 202200:26	–	ibm
IBM Security Bulletins	Security Bulletin: Network Intrusion Prevention System is affected by multiple Apache web server vulnerabilities (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)	23 Feb 202219:21	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.9	8 Sep 202200:26	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, IBM Smart Analytics System 1050, and 2050 are affected by the following Apache Tomcat vulnerabilities: CVE-2014-0098 and CVE-2013-6438	16 Jun 201813:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache affect the IBM Flex System Manager (FSM): (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.2	15 Jun 201806:59	–	ibm
Gitee	Exploit for CVE-2007-6750	27 Jul 202503:38	–	gitee
Tenable Nessus	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Apache HTTP Server < 2.4.8 Multiple Vulnerabilities	20 Mar 201400:00	–	nessus

NVD

Node

apache http_serverRange2.2.0–2.2.27

apache http_serverRange2.4.1–2.4.9

Node

Node

Source	Link
lists	www.lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
secunia	www.secunia.com/advisories/58230
security	www.security.gentoo.org/glsa/glsa-201408-12.xml
secunia	www.secunia.com/advisories/59315
lists	www.lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
svn	www.svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c
archives	www.archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
advisories	www.advisories.mageia.org/MGASA-2014-0135.html
lists	www.lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E
support	www.support.apple.com/kb/HT6535

06 May 2026 22:30Current

8High risk

Vulners AI Score8

CVSS 25

EPSS0.26831