Lucene search

K
mageiaGentoo FoundationMGASA-2014-0105
HistoryFeb 28, 2014 - 2:00 a.m.

Updated subversion packages fix CVE-2014-0032

2014-02-2802:00:06
Gentoo Foundation
advisories.mageia.org
12

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.139 Low

EPSS

Percentile

95.6%

Updated subversion packages fix security vulnerability: The mod_dav_svn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via an OPTIONS request (CVE-2014-0032). The package has been updated to version 1.8.8, which fixes this issue, as well as several others.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchsubversion< 1.8.8-1subversion-1.8.8-1.mga4

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.139 Low

EPSS

Percentile

95.6%