Evil-DB LogoEvil-DB
← All CVEs

CVE-2013-5704

medium · 5

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

5
CVSS
56.3%
EPSS (exploit prob.)
99th
EPSS percentile
2014-04-15
Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

VendorProductAffected versions
apachehttp_server2.2.0
apachehttp_server2.2.2
apachehttp_server2.2.3
apachehttp_server2.2.4
apachehttp_server2.2.5
apachehttp_server2.2.6
apachehttp_server2.2.8
apachehttp_server2.2.9
apachehttp_server2.2.10
apachehttp_server2.2.11
apachehttp_server2.2.12
apachehttp_server2.2.13
apachehttp_server2.2.14
apachehttp_server2.2.15
apachehttp_server2.2.16
apachehttp_server2.2.17
apachehttp_server2.2.18
apachehttp_server2.2.19
apachehttp_server2.2.20
apachehttp_server2.2.21
apachehttp_server2.2.22
apachehttp_server2.2.23
apachehttp_server2.2.24
apachehttp_server2.2.25
apachehttp_server2.2.26
apachehttp_server2.2.27
apachehttp_server2.4.1
apachehttp_server2.4.2
apachehttp_server2.4.3
apachehttp_server2.4.4
apachehttp_server2.4.6
apachehttp_server2.4.7
apachehttp_server2.4.9
apachehttp_server2.4.10
redhatenterprise_linux_desktop6.0
redhatenterprise_linux_desktop7.0
redhatenterprise_linux_eus7.3
redhatenterprise_linux_eus7.4
redhatenterprise_linux_eus7.5
redhatenterprise_linux_eus7.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-5704