Oval Definition:oval:org.opensuse.security:def:20131915
Revision Date:2022-06-30Version:1
Title:CVE-2013-1915
Description:

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2013-1915
Mitre CVE-2013-1915
SUSE CVE-2013-1915
openSUSE-SU-2013:1331-1
openSUSE-SU-2013:1331-1
openSUSE-SU-2013:1336-1
openSUSE-SU-2013:1336-1
openSUSE-SU-2013:1342-1
openSUSE-SU-2013:1342-1
SUSE-SU-2013:0706-1
SUSE-SU-2013:0706-1
Platform(s):openSUSE 12.2 Update
openSUSE 12.3 Update
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Storage 6
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.0
SUSE Manager Proxy 4.1
SUSE Manager Retail Branch Server 4.0
SUSE Manager Retail Branch Server 4.1
SUSE Manager Server 4.0
SUSE Manager Server 4.1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND apache2-mod_security2-2.7.1-0.2.12.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND apache2-mod_security2-2.7.1-0.2.12 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • OR SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND apache2-mod_security2-2.7.1-0.2.12 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND apache2-mod_security2-2.7.1-0.2.18 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND apache2-mod_security2-2.7.1-0.2.12.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND apache2-mod_security2-2.7.1-0.2.18.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND apache2-mod_security2-2.9.2-1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND apache2-mod_security2-2.9.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND apache2-mod_security2-2.9.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND apache2-mod_security2-2.9.2-1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND apache2-mod_security2-2.9.2-1 is installed
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND apache2-mod_security2-2.9.0-5.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND apache2-mod_security2-2.9.2-1.34 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND apache2-mod_security2-2.9.2-1.34 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND apache2-mod_security2-2.9.2-1.34 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP1 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • OR SUSE Linux Enterprise Server 15 SP1 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
  • OR SUSE Linux Enterprise Storage 6 is installed
  • OR SUSE Manager Proxy 4.0 is installed
  • OR SUSE Manager Retail Branch Server 4.0 is installed
  • OR SUSE Manager Server 4.0 is installed
  • AND apache2-mod_security2-2.9.2-1.34 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP2 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • OR SUSE Linux Enterprise Server 15 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • OR SUSE Linux Enterprise Storage 7 is installed
  • OR SUSE Manager Proxy 4.1 is installed
  • OR SUSE Manager Retail Branch Server 4.1 is installed
  • OR SUSE Manager Server 4.1 is installed
  • AND apache2-mod_security2-2.9.2-1.34 is installed
  • BACK