Lucene search

K
freebsdFreeBSD2AE24334-F2E6-11E2-8346-001E8C75030D
HistoryJul 19, 2013 - 12:00 a.m.

subversion -- remotely triggerable "Assertion failed" DoS vulnerability or read overflow.

2013-07-1900:00:00
vuxml.freebsd.org
16

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

71.2%

Subversion Project reports:

Subversion’s mod_dav_svn Apache HTTPD server module will trigger an assertion
on some requests made against a revision root. This can lead to a DoS.
If assertions are disabled it will trigger a read overflow which may cause a
SEGFAULT (or equivalent) or undefined behavior.
Commit access is required to exploit this.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsubversion= 1.8.0UNKNOWN
FreeBSDanynoarchsubversion< 1.8.1UNKNOWN

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

71.2%