Description

The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

Remediation

References

CVE-2013-6438

Related Vulnerabilities

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Cross-Site Request Forgery (7.1.6)

WordPress CVE-2016-5839 Vulnerability (CVE-2016-5839)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7570)

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3315)

MediaWiki Other Vulnerability (CVE-2005-0535)

Severity

Medium

Classification

CVE-2013-6438

Tags

Missing Update Known Vulnerabilities