Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vg84-brwd-bkez
Vulnerability ID VCID-vg84-brwd-bkez
Aliases CVE-2013-4352
Summary A NULL pointer dereference was found in mod_cache. A malicious HTTP server could cause a crash in a caching forward proxy configuration. (Note that this vulnerability was fixed in the 2.4.7 release, but the security impact was not disclosed at the time of the release.)
Status Published
Exploitability 0.5
Weighted Severity 2.1
Risk 1.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-476 NULL Pointer Dereference
System Score Found at
epss 0.24352 https://api.first.org/data/v1/epss?cve=CVE-2013-4352
epss 0.24352 https://api.first.org/data/v1/epss?cve=CVE-2013-4352
epss 0.24352 https://api.first.org/data/v1/epss?cve=CVE-2013-4352
apache_httpd low https://httpd.apache.org/security/json/CVE-2013-4352.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4352.json
https://api.first.org/data/v1/epss?cve=CVE-2013-4352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4352
1120604 https://bugzilla.redhat.com/show_bug.cgi?id=1120604
CVE-2013-4352 https://httpd.apache.org/security/json/CVE-2013-4352.json
RHSA-2014:0921 https://access.redhat.com/errata/RHSA-2014:0921
RHSA-2014:0922 https://access.redhat.com/errata/RHSA-2014:0922
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.96203
EPSS Score 0.24352
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-02T04:53:42.254513+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2013-4352.json 38.6.0