Lucene search

K
freebsdFreeBSD8E887B71-D769-11E4-B1C2-20CF30E32F6D
HistoryMar 31, 2015 - 12:00 a.m.

subversion -- DoS vulnerabilities

2015-03-3100:00:00
vuxml.freebsd.org
11

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.037 Low

EPSS

Percentile

91.7%

Subversion Project reports:

Subversion HTTP servers with FSFS repositories are vulnerable to a remotely
triggerable excessive memory use with certain REPORT requests.
Subversion mod_dav_svn and svnserve are vulnerable to a remotely triggerable
assertion DoS vulnerability for certain requests with dynamically evaluated
revision numbers.
Subversion HTTP servers allow spoofing svn:author property values for new
revisions.

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.037 Low

EPSS

Percentile

91.7%