{"id":"CVE-2013-7401","details":"The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a \" \" or \"?\" character in an ICAP request, as demonstrated by use of the OPTIONS method.","modified":"2026-04-16T06:22:50.166808245Z","published":"2014-12-19T20:59:00Z","references":[{"type":"ADVISORY","url":"http://advisories.mageia.org/MGASA-2014-0530.html"},{"type":"ADVISORY","url":"http://security.gentoo.org/glsa/glsa-201409-07.xml"},{"type":"ADVISORY","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:001"},{"type":"EVIDENCE","url":"http://osvdb.org/ref/89/c-icap.txt"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2014/09/15/6"},{"type":"WEB","url":"http://sourceforge.net/p/c-icap/code/1018/"},{"type":"WEB","url":"http://www.osvdb.org/89304"}],"schema_version":"1.7.5"}