CVE-2013-2765

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
trustwavemodsecurity
𝑥
< 2.7.4
opensuseopensuse
11.4
opensuseopensuse
12.2
opensuseopensuse
12.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
modsecurity-apache
bullseye
2.9.3-3+deb11u2
fixed
bullseye (security)
2.9.3-3+deb11u1
fixed
bookworm
2.9.7-1
fixed
sid
2.9.8-1
fixed
trixie
2.9.8-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
modsecurity-apache
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
trusty
not-affected
precise
ignored
lucid
dne
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html
http://sourceforge.net/mailarchive/message.php?msg_id=30900019
http://www.modsecurity.org/
http://www.shookalabs.com/
https://bugzilla.redhat.com/show_bug.cgi?id=967615
https://github.com/SpiderLabs/ModSecurity/commit/0840b13612a0b7ef1ce7441cf811dcfc6b463fba
https://github.com/shookalabs/exploits/blob/master/modsecurity_cve_2013_2765_check.py
https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES
http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html
http://sourceforge.net/mailarchive/message.php?msg_id=30900019
http://www.modsecurity.org/
http://www.shookalabs.com/
https://bugzilla.redhat.com/show_bug.cgi?id=967615
https://github.com/SpiderLabs/ModSecurity/commit/0840b13612a0b7ef1ce7441cf811dcfc6b463fba
https://github.com/shookalabs/exploits/blob/master/modsecurity_cve_2013_2765_check.py
https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES