httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav

🗓️ 05 Aug 2013 15:33:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 4 Views

Apache HTTP Server older than 2.2.25 DoS via MERGE with non-DAV href causing a segfault.

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 6.1.0.47	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.31	15 Jun 201806:59	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security exposure in IBM HTTP Server CVE-2013-1896 PM89996	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.1	26 Sep 202203:31	–	ibm
Gitee	Exploit for CVE-2007-6750	27 Jul 202503:38	–	gitee
Tenable Nessus	Apache 2.2.x < 2.2.25 Remote Denial of Service Vulnerability	12 Jul 201200:00	–	nessus
Tenable Nessus	Apache 2.4.1 to 2.4.4 Multiple Vulnerabilities	23 Jul 201300:00	–	nessus
Tenable Nessus	Apache 2.2.x < 2.2.25 Remote Denial of Service Vulnerability	12 Jul 201200:00	–	nessus

Vulners

Node

AND

redhat jboss_enterprise_web_serverRange<2.0.1

redhat enterprise_linux

Source	Link
access	www.access.redhat.com/security/cve/CVE-2013-1896
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-1896
cve	www.cve.org/CVERecord

14 May 2026 22:17Current

7.3High risk

Vulners AI Score7.3

CVSS 24.3

EPSS0.29484

Apache HTTP Server WebDAV module Merge request Segmentation fault Denial of service Older than 2.2.25