Lucene search

K
freebsdFreeBSDB6BEB137-9DC0-11E2-882F-20CF30E32F6D
HistoryApr 05, 2013 - 12:00 a.m.

Subversion -- multiple vulnerabilities

2013-04-0500:00:00
vuxml.freebsd.org
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.11 Low

EPSS

Percentile

95.1%

Subversion team reports:

Subversion’s mod_dav_svn Apache HTTPD server module will use excessive
amounts of memory when a large number of properties are set or deleted
on a node.

Subversion’s mod_dav_svn Apache HTTPD server module will crash when
a LOCK request is made against activity URLs.

Subversion’s mod_dav_svn Apache HTTPD server module will crash in some
circumstances when a LOCK request is made against a non-existent URL.

Subversion’s mod_dav_svn Apache HTTPD server module will crash when a
PROPFIND request is made against activity URLs.

Subversion’s mod_dav_svn Apache HTTPD server module will crash when a
log REPORT request receives a limit that is out of the allowed range.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsubversion= 1.7.0UNKNOWN
FreeBSDanynoarchsubversion< 1.7.9UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.11 Low

EPSS

Percentile

95.1%