CVE-2013-5704

51

FAUCET Score

CVE-2013-5704 describes a bypass vulnerability in the mod_headers module of Apache HTTP Server 2.2.22, allowing remote attackers to circumvent "RequestHeader unset" directives by embedding headers in the trailer of chunked transfer-encoded data. This issue affects various products including Apache, Apple, Canonical, Oracle, and Red Hat. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), it indicates a network-based attack with low complexity, requiring no authentication, and potentially leading to partial integrity impact. Despite a high FAUCET Risk Score of 98/100 and above-average community discussion and media coverage, there is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit, Nuclei, or ExploitDB entries.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		2.2.0CPE matchmatch criteria	cpe:2.3:a:apache:http_server:2.2.0:::::::*
		2.2.2CPE matchmatch criteria	cpe:2.3:a:apache:http_server:2.2.2:::::::*
		2.2.3CPE matchmatch criteria	cpe:2.3:a:apache:http_server:2.2.3:::::::*
		2.2.4CPE matchmatch criteria	cpe:2.3:a:apache:http_server:2.2.4:::::::*
		2.2.5CPE matchmatch criteria	cpe:2.3:a:apache:http_server:2.2.5:::::::*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

60.20%

Probability of exploitation in next 30 days

EPSS Percentile

99.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.6020 is in the 99th percentile among its peer group of 23,725 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (35)

apachepatch availablevia llm_extracted

Fixed in: 2.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: httpd-0:2.2.15-45.el6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: httpd-0:2.4.6-31.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 5Fixed in: httpd-0:2.2.26-41.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 5Fixed in: mod_cluster-native-0:1.2.9-6.Final_redhat_2.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 6Fixed in: httpd-0:2.2.26-41.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 6Fixed in: mod_cluster-native-0:1.2.9-6.Final_redhat_2.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 7Fixed in: httpd22-0:2.2.26-42.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 7Fixed in: mod_cluster-native-0:1.2.9-6.Final_redhat_2.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 2.1Fixed in: httpd

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3.0

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: apache-commons-collections-eap6-0:3.2.1-18.redhat_7.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: httpd24-0:2.4.6-59.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: mod_bmx-0:0.9.5-7.GA.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat7-0:7.0.59-42_patch_01.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat8-0:8.0.18-52_patch_01.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: apache-commons-collections-eap6-0:3.2.1-18.redhat_7.1.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: httpd24-0:2.4.6-59.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: mod_bmx-0:0.9.5-7.GA.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.59-42_patch_01.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.18-52_patch_01.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-vault-0:1.0.8-4.Final_redhat_4.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 6Fixed in: httpd24-httpd-0:2.4.6-22.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUSFixed in: httpd24-httpd-0:2.4.6-22.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUSFixed in: httpd24-httpd-0:2.4.6-22.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUSFixed in: httpd24-httpd-0:2.4.6-22.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 7Fixed in: httpd24-httpd-0:2.4.6-25.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-vault-0:1.0.8-4.Final_redhat_4.1.ep7.el6

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: httpd

redhatend of lifevia redhat_api

Product: Red Hat Directory Server 8Fixed in: httpd

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: httpd

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: httpd

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1Fixed in: httpd

Vendor Advisories (4)

apachellm-apache-f398f8ed28802aa3LOW

Apache HTTP Server 2.4 vulnerabilities - The Apache HTTP Server Project

apachellm-apache-a7a91ec4c0e9421dHIGH

Apache HTTP Server 2.4 vulnerabilities - The Apache HTTP Server Project

redhatCVE-2013-5704Low

httpd: bypass of mod_headers rules via chunked requests

apachellm-apache-684e4d0003611bd4LOW

Apache HTTP Server 2.4 vulnerabilities - The Apache HTTP Server Project

References

lists.apple.com / archives/security-announce/2015/Apr/msg00001.html

Mailing ListThird Party Advisory

lists.apple.com / archives/security-announce/2015/Sep/msg00004.html

Mailing ListThird Party Advisory

Mailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

martin.swende.se / blog/HTTPChunked.html

Broken LinkExploitThird Party Advisory

rhn.redhat.com / errata/RHSA-2015-0325.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-1249.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-2661.html

Broken LinkThird Party Advisory

rhn.redhat.com / errata/RHSA-2016-0061.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-0062.html

Third Party Advisory

access.redhat.com / errata/RHSA-2015:2659

Third Party Advisory

access.redhat.com / errata/RHSA-2015:2660

Third Party Advisory

h20564.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay

Third Party Advisory

httpd.apache.org / security/vulnerabilities_24.html

Vendor Advisory

lists.apache.org / thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

lists.apache.org / thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E

security.gentoo.org / glsa/201504-03

Third Party Advisory

support.apple.com / HT204659

Third Party Advisory

support.apple.com / HT205219

Third Party Advisory

svn.apache.org / repos/asf/httpd/httpd/branches/2.2.x/CHANGES

Release NotesVendor Advisory

svn.apache.org / viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c

PatchVendor Advisory

svn.apache.org / viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c

PatchVendor Advisory

mandriva.com / security/advisories

Third Party Advisory

oracle.com / technetwork/topics/security/bulletinjan2015-2370101.html

Third Party Advisory

oracle.com / technetwork/topics/security/cpujan2015-1972971.html

Third Party Advisory

oracle.com / technetwork/topics/security/cpujan2016-2367955.html

Third Party Advisory

oracle.com / technetwork/topics/security/cpujul2015-2367936.html

Third Party Advisory

oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html

Third Party Advisory

securityfocus.com / bid/66550

Third Party AdvisoryVDB Entry

ubuntu.com / usn/USN-2523-1

Third Party Advisory