CVE-2013-1896

CVE-2013-1896 describes a denial-of-service vulnerability in Apache HTTP Server versions prior to 2.2.25, specifically affecting the mod_dav.c module when configured with mod_dav_svn. A remote attacker can trigger a segmentation fault by sending a crafted MERGE request where a non-DAV URI is referenced within the XML data's href attribute. This vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and potential for partial availability impact. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has received some community discussion and media coverage.