CVE-2013-7401

2014-12-1920:59:00

CWE-119

[email protected]

web.nvd.nist.gov

c-icap

security vulnerability

denial of service

cve-2013-7401

nvd

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.036 Low

EPSS

Percentile

91.7%

JSON

The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " " or “?” character in an ICAP request, as demonstrated by use of the OPTIONS method.

CPENameOperatorVersion
c-icap_project:c-icapc-icap project c-icapeq0.2.6
c-icap_project:c-icapc-icap project c-icapeq0.2.1
c-icap_project:c-icapc-icap project c-icapeq0.2.3
c-icap_project:c-icapc-icap project c-icapeq0.2.4
c-icap_project:c-icapc-icap project c-icapeq0.2.5
c-icap_project:c-icapc-icap project c-icapeq0.2.2

CPE	Name	Operator	Version
c-icap_project:c-icap	c-icap project c-icap	eq	0.2.6
c-icap_project:c-icap	c-icap project c-icap	eq	0.2.1
c-icap_project:c-icap	c-icap project c-icap	eq	0.2.3
c-icap_project:c-icap	c-icap project c-icap	eq	0.2.4
c-icap_project:c-icap	c-icap project c-icap	eq	0.2.5
c-icap_project:c-icap	c-icap project c-icap	eq	0.2.2