UpHeron
All vulnerabilities

Servers and applications

CVE-2013-5704

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

Severity
Medium 5.0
Published
15 Apr 2014
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Version 2.4.10
  • Version 2.4.9
  • Version 2.4.7
  • Version 2.4.6
All 34 release lines
  • Version 2.2.0
  • Version 2.2.2
  • Version 2.2.3
  • Version 2.2.4
  • Version 2.2.5
  • Version 2.2.6
  • Version 2.2.8
  • Version 2.2.9
  • Version 2.2.10
  • Version 2.2.11
  • Version 2.2.12
  • Version 2.2.13
  • Version 2.2.14
  • Version 2.2.15
  • Version 2.2.16
  • Version 2.2.17
  • Version 2.2.18
  • Version 2.2.19
  • Version 2.2.20
  • Version 2.2.21
  • Version 2.2.22
  • Version 2.2.23
  • Version 2.2.24
  • Version 2.2.25
  • Version 2.2.26
  • Version 2.2.27
  • Version 2.4.1
  • Version 2.4.2
  • Version 2.4.3
  • Version 2.4.4
  • Version 2.4.6
  • Version 2.4.7
  • Version 2.4.9
  • Version 2.4.10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-5704
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-5704