Wind River Support Network


LIN6-7023 : Security Advisory - apache - CVE-2013-6438

Created: Mar 30, 2014    Updated: Dec 3, 2018
Resolved Date: Apr 3, 2014
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

Other Downloads

Live chat