Every CVE Search/ Get API key

CVE-2013-4352

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...

4.3 MediumFix available

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Exploit likelihood

11.5%Up 6.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
CVE-2013-4352
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
CVE-2013-4352
Updated
2026-11-02
EUVDEUVD-2013-4236 No score

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
EUVD-2013-4236
Updated
2026-11-03
GitHub AdvisoriesGHSA-qvf4-vfh5-xgq5 No score

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
GHSA-qvf4-vfh5-xgq5
Updated
2026-11-02
OSVBELL-CVE-2013-4352 4.3

CVE-2013-4352 does not affect BellSoft software

Record
BELL-CVE-2013-4352
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSV No score

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
CVE-2013-4352
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4352 No score

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
DEBIAN-CVE-2013-4352
Updated
2026-11-02
OSVUBUNTU-CVE-2013-4352 No score

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Record
UBUNTU-CVE-2013-4352
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apache2
Debian:12
 before 2.4.7-1
2.4.7-1
apache2
Debian:13
 before 2.4.7-1
2.4.7-1
apache2
Debian:14
 before 2.4.7-1
2.4.7-1
httpd
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-devel
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-manual
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-tools
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_ldap
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_proxy_html
Red Hat:enterprise_linux:7::client
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
Show 47 moreShow less
Affected packages
PackageAffectedFixed
mod_session
Red Hat:enterprise_linux:7::client
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_ssl
Red Hat:enterprise_linux:7::client
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
httpd
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-devel
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-manual
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-tools
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_ldap
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_proxy_html
Red Hat:enterprise_linux:7::computenode
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
mod_session
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_ssl
Red Hat:enterprise_linux:7::computenode
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
httpd
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-devel
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-manual
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-tools
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_ssl
Red Hat:enterprise_linux:7::server
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
mod_ldap
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_proxy_html
Red Hat:enterprise_linux:7::server
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
mod_session
Red Hat:enterprise_linux:7::server
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-devel
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-manual
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd-tools
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_ssl
Red Hat:enterprise_linux:7::workstation
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
mod_ldap
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
mod_proxy_html
Red Hat:enterprise_linux:7::workstation
 before 1:2.4.6-18.el7_0
1:2.4.6-18.el7_0
mod_session
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.6-18.el7_0
0:2.4.6-18.el7_0
httpd24-httpd
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-httpd-debuginfo
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-httpd-devel
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-httpd-manual
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-httpd-tools
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-mod_ldap
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-mod_proxy_html
Red Hat:rhel_software_collections:1::el6
 before 1:2.4.6-18.el6
1:2.4.6-18.el6
httpd24-mod_session
Red Hat:rhel_software_collections:1::el6
 before 0:2.4.6-18.el6
0:2.4.6-18.el6
httpd24-mod_ssl
Red Hat:rhel_software_collections:1::el6
 before 1:2.4.6-18.el6
1:2.4.6-18.el6
httpd24-httpd
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-httpd-debuginfo
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-httpd-devel
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-httpd-manual
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-httpd-tools
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-mod_ldap
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-mod_proxy_html
Red Hat:rhel_software_collections:1::el7
 before 1:2.4.6-21.el7
1:2.4.6-21.el7
httpd24-mod_session
Red Hat:rhel_software_collections:1::el7
 before 0:2.4.6-21.el7
0:2.4.6-21.el7
httpd24-mod_ssl
Red Hat:rhel_software_collections:1::el7
 before 1:2.4.6-21.el7
1:2.4.6-21.el7

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4352 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published July 20, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.5%, the 96th percentile. Fixed in apache2 2.4.7-1.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open