vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2013-2765

N/A
Published: July 15, 2013 at 03:00 PM UTC
Updated: June 16, 2026 at 11:53 PM UTC
2 products affected across 2 vendorsopenSUSEModsecurity· also runs on 1 platform

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 14%

Description

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

openSUSE· openSUSE
95%
11.412.212.3
Modsecurity· Trustwave
95%
v < 2.7.4
Affected range stops below 2.7.4, so it looks safe — our inference, not a vendor statement
apache-http-server (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (11)

Mailing Listx_refsource_BUGTRAQBroken Link
Source: [email protected]
http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
http://sourceforge.net/mailarchive/message.php?msg_id=30900019
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://www.modsecurity.org/
x_refsource_MISCThird Party Advisory
Source: [email protected]
http://www.shookalabs.com/
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=967615

CVSS

5MEDIUM[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card