[SECURITY] [DLA 119-1] subversion security update

2014-12-2122:05:30

lists.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

Package : subversion
Version : 1.6.12dfsg-7+deb6u1
CVE ID : CVE-2014-3580
Debian Bug : 773263

Evgeny Kotkov discovered a NULL pointer dereference while processing
REPORT requests in mod_dav_svn, the Subversion component which is used
to serve repositories with the Apache web server. A remote attacker
could abuse this vulnerability for a denial of service.

We recommend that you upgrade your subversion packages.

–
More information about Debian LTS: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian6alllibsvn-java< 1.6.12dfsg-7+deb6u1libsvn-java_1.6.12dfsg-7+deb6u1_all.deb
Debian6alllibsvn-perl< 1.6.12dfsg-7+deb6u1libsvn-perl_1.6.12dfsg-7+deb6u1_all.deb
Debian6alllibsvn-dev< 1.6.12dfsg-7+deb6u1libsvn-dev_1.6.12dfsg-7+deb6u1_all.deb
Debian6alllibsvn-ruby< 1.6.12dfsg-7+deb6u1libsvn-ruby_1.6.12dfsg-7+deb6u1_all.deb
Debian6alllibsvn-doc< 1.6.12dfsg-7+deb6u1libsvn-doc_1.6.12dfsg-7+deb6u1_all.deb
Debian6allsubversion< 1.6.12dfsg-7+deb6u1subversion_1.6.12dfsg-7+deb6u1_all.deb
Debian6alllibsvn-ruby1.8< 1.6.12dfsg-7+deb6u1libsvn-ruby1.8_1.6.12dfsg-7+deb6u1_all.deb
Debian6allsubversion-tools< 1.6.12dfsg-7+deb6u1subversion-tools_1.6.12dfsg-7+deb6u1_all.deb
Debian6allpython-subversion< 1.6.12dfsg-7+deb6u1python-subversion_1.6.12dfsg-7+deb6u1_all.deb
Debian6alllibapache2-svn< 1.6.12dfsg-7+deb6u1libapache2-svn_1.6.12dfsg-7+deb6u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	libsvn-java	< 1.6.12dfsg-7+deb6u1	libsvn-java_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	libsvn-perl	< 1.6.12dfsg-7+deb6u1	libsvn-perl_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	libsvn-dev	< 1.6.12dfsg-7+deb6u1	libsvn-dev_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	libsvn-ruby	< 1.6.12dfsg-7+deb6u1	libsvn-ruby_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	libsvn-doc	< 1.6.12dfsg-7+deb6u1	libsvn-doc_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	subversion	< 1.6.12dfsg-7+deb6u1	subversion_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	libsvn-ruby1.8	< 1.6.12dfsg-7+deb6u1	libsvn-ruby1.8_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	subversion-tools	< 1.6.12dfsg-7+deb6u1	subversion-tools_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	python-subversion	< 1.6.12dfsg-7+deb6u1	python-subversion_1.6.12dfsg-7+deb6u1_all.deb
Debian	6	all	libapache2-svn	< 1.6.12dfsg-7+deb6u1	libapache2-svn_1.6.12dfsg-7+deb6u1_all.deb