CVE-2013-5705: Debian Linux

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Trustwave Modsecurity: before 2.7.6 (fixed in 2.7.6)

Published 2014-04-15. Last modified 2026-06-16.