Description

The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

Remediation

References

CVE-2013-6438

Related Vulnerabilities

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (1.1.1.11)

MySQL CVE-2017-3600 Vulnerability (CVE-2017-3600)

WordPress Plugin bbPress Members Only Cross-Site Request Forgery (1.2.1)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8153)

WordPress Plugin WordPress Backup and Migrate-Backup Guard Arbitrary File Upload (1.0.2)

Severity

Medium

Classification

CVE-2013-6438

Tags

Missing Update Known Vulnerabilities