CVE-2013-2765 REJECTED

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.

EPSS 5.38% · 90.0th percentile

Risk Scores

EPSS Score
5.38%
90.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSmodsecurity-apache0, 2.7.4-1, 2.7.5-1

Timeline

References

Open in Interactive Console →