CVE-2013-2765: Null Pointer Dereference
Description of problem:
Modsecurity 2.7.4 was released today, according to the changelog there a null pointer dereference flaw
.....
Security Issues:
Fixed Remote Null Pointer DeReference (CVE-2013-2765). When forceRequestBodyVariable action is triggered and a unknown Content-Type is used, modsecurity will crash trying to manipulate msr->mscreqbodychunks->elts however msr->mscreqbodychunks is NULL. (Thanks Younes JAAIDI).
......
URL: https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES
Other sources
The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2765?
CVE-2013-2765 has been rated as a moderate severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2013-2765?
To fix CVE-2013-2765, upgrade ModSecurity to version 2.7.4 or later.
What causes CVE-2013-2765?
CVE-2013-2765 is caused by a null pointer dereference flaw in ModSecurity.
Which versions of ModSecurity are affected by CVE-2013-2765?
ModSecurity versions prior to 2.7.4 are affected by CVE-2013-2765.
Is there a workaround for CVE-2013-2765?
There is no official workaround for CVE-2013-2765; upgrading to the patched version is recommended.