Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3522HistoryAug 19, 2014 - 6:55 p.m.
CVE-2014-3522
2014-08-1918:55:00
Debian Security Bug Tracker
security-tracker.debian.org
12
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.4%
The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | subversion | < 1.8.10-1 | subversion_1.8.10-1_all.deb |
| Debian | 11 | all | subversion | < 1.8.10-1 | subversion_1.8.10-1_all.deb |
| Debian | 10 | all | subversion | < 1.8.10-1 | subversion_1.8.10-1_all.deb |
| Debian | 999 | all | subversion | < 1.8.10-1 | subversion_1.8.10-1_all.deb |
| Debian | 13 | all | subversion | < 1.8.10-1 | subversion_1.8.10-1_all.deb |
Related
cve
cve
CVE-2014-3522
2014-08-19 18:55:00
amazon
amazon
Medium: subversion
2014-09-17 21:48:00
openvas
openvas
Fedora Update for subversion FEDORA-2014-9636
2014-08-29 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-413)
2015-09-08 00:00:00
prion
prion
Code injection
2014-08-19 18:55:00
nessus
nessus
Fedora 20 : subversion-1.8.10-1.fc20 (2014-9636)
2014-08-29 00:00:00
Amazon Linux AMI : subversion (ALAS-2014-413)
2014-10-12 00:00:00
Apache Subversion 1.0.x - 1.7.17 / 1.8.x < 1.8.10 Multiple Vulnerabilities
2014-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2014-3522
2014-08-12 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: subversion-1.8.10-1.fc20
2014-08-28 15:33:58
freebsd
freebsd
subversion -- several vulnerabilities
2014-08-06 00:00:00
mageia
mageia
Updated subversion packages fix security vulnerabilities
2014-08-21 13:36:13
securityvulns
securityvulns
[USN-2316-1] Subversion vulnerabilities
2014-08-26 00:00:00
Apache Subversion multiple security vulnerabilities
2014-08-26 00:00:00
ubuntu
ubuntu
Subversion vulnerabilities
2014-08-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1979
2021-07-02 18:11:52
gentoo
gentoo
Subversion, Serf: Multiple Vulnerabilities
2016-10-11 00:00:00
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.4%
Related for DEBIANCVE:CVE-2014-3522