CVE-2013-4352
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
Exploit likelihood
What each source reports
NVD Score used
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
CVE-2013-4352- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
CVE-2013-4352- Updated
- 2026-11-02
EUVDEUVD-2013-4236 No score
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
EUVD-2013-4236- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qvf4-vfh5-xgq5 No score
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
GHSA-qvf4-vfh5-xgq5- Updated
- 2026-11-02
OSVBELL-CVE-2013-4352
CVE-2013-4352 does not affect BellSoft software
- Record
BELL-CVE-2013-4352- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSV No score
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
CVE-2013-4352- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4352 No score
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
DEBIAN-CVE-2013-4352- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4352 No score
The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.
- Record
UBUNTU-CVE-2013-4352- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.4.7-1 | 2.4.7-1 |
apache2Debian:13 |
before 2.4.7-1 | 2.4.7-1 |
apache2Debian:14 |
before 2.4.7-1 | 2.4.7-1 |
httpdRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-develRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-manualRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-toolsRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_ldapRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_proxy_htmlRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
Show 47 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_sessionRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_sslRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
httpdRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-develRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-manualRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_ldapRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_proxy_htmlRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
mod_sessionRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_sslRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
httpdRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-develRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-manualRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-toolsRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_sslRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
mod_ldapRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_proxy_htmlRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
mod_sessionRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpdRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-develRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-manualRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_sslRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
mod_ldapRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
mod_proxy_htmlRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 1:2.4.6-18.el7_0 | 1:2.4.6-18.el7_0 |
mod_sessionRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:2.4.6-18.el7_0 | 0:2.4.6-18.el7_0 |
httpd24-httpdRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-httpd-debuginfoRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-httpd-develRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-httpd-manualRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-httpd-toolsRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-mod_ldapRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-mod_proxy_htmlRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 1:2.4.6-18.el6 | 1:2.4.6-18.el6 |
httpd24-mod_sessionRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 0:2.4.6-18.el6 | 0:2.4.6-18.el6 |
httpd24-mod_sslRed Hat:rhel_software_collections:1::el6 From an advisory covering 5 CVEs |
before 1:2.4.6-18.el6 | 1:2.4.6-18.el6 |
httpd24-httpdRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-httpd-debuginfoRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-httpd-develRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-httpd-manualRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-httpd-toolsRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-mod_ldapRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-mod_proxy_htmlRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 1:2.4.6-21.el7 | 1:2.4.6-21.el7 |
httpd24-mod_sessionRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 0:2.4.6-21.el7 | 0:2.4.6-21.el7 |
httpd24-mod_sslRed Hat:rhel_software_collections:1::el7 From an advisory covering 5 CVEs |
before 1:2.4.6-21.el7 | 1:2.4.6-21.el7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4352 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published July 20, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.5%, the 96th percentile. Fixed in apache2 2.4.7-1.
References
httpd.apache.org/security/vulnerabilities_24.html
svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c
bugzilla.redhat.com/show_bug.cgi?id=1120604
lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E
Show 50 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-4352
github.com/advisories/GHSA-qvf4-vfh5-xgq5
docs.bell-sw.com/security/cves/CVE-2013-4352
security-tracker.debian.org/tracker/CVE-2013-4352
access.redhat.com/errata/RHSA-2014:0921
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0921.json
cve.org/CVERecord?id=CVE-2013-4352
ubuntu.com/security/CVE-2013-4352