Wind River Support Network

HomeDefectsLIN5-18423
Fixed

LIN5-18423 : Security Advisory - apache - CVE-2013-6438

Created: Mar 30, 2014    Updated: Dec 19, 2017
Resolved Date: Apr 3, 2014
Found In Version: 5.0.1.14
Fix Version: 5.0.1.14
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6438

Other Downloads


Live chat
Online