4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.139 Low
EPSS
Percentile
95.6%
Updated subversion packages fix security vulnerability: The mod_dav_svn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via an OPTIONS request (CVE-2014-0032). The package has been patched to correct this issue. Additionally, the svnserve service was using the incorrect root directory for the repositories. This has also been corrected. The root directory is now defined in the /etc/sysconfig/svnserve file.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 3 | noarch | subversion | < 1.7.14-1.1 | subversion-1.7.14-1.1.mga3 |