Lucene search

K
mageiaGentoo FoundationMGASA-2014-0104
HistoryFeb 28, 2014 - 1:58 a.m.

Updated subversion packages fix CVE-2014-0032

2014-02-2801:58:42
Gentoo Foundation
advisories.mageia.org
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.139 Low

EPSS

Percentile

95.6%

Updated subversion packages fix security vulnerability: The mod_dav_svn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via an OPTIONS request (CVE-2014-0032). The package has been patched to correct this issue. Additionally, the svnserve service was using the incorrect root directory for the repositories. This has also been corrected. The root directory is now defined in the /etc/sysconfig/svnserve file.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchsubversion< 1.7.14-1.1subversion-1.7.14-1.1.mga3

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.139 Low

EPSS

Percentile

95.6%