Lucene search
HistoryDec 18, 2014 - 3:59 p.m.
CVE-2014-3580
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
9 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.8%
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Affected configurations
Node
redhatenterprise_linux_desktopMatch6.0
ORredhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_hpc_nodeMatch6.0
ORredhatenterprise_linux_hpc_nodeMatch7.0
ORredhatenterprise_linux_serverMatch6.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_server_eusMatch6.6.z
ORredhatenterprise_linux_workstationMatch6.0
ORredhatenterprise_linux_workstationMatch7.0
Node
apachesubversionMatch1.0.0
ORapachesubversionMatch1.0.1
ORapachesubversionMatch1.0.2
ORapachesubversionMatch1.0.3
ORapachesubversionMatch1.0.4
ORapachesubversionMatch1.0.5
ORapachesubversionMatch1.0.6
ORapachesubversionMatch1.0.7
ORapachesubversionMatch1.0.8
ORapachesubversionMatch1.0.9
ORapachesubversionMatch1.1.0
ORapachesubversionMatch1.1.1
ORapachesubversionMatch1.1.2
ORapachesubversionMatch1.1.3
ORapachesubversionMatch1.1.4
ORapachesubversionMatch1.2.0
ORapachesubversionMatch1.2.1
ORapachesubversionMatch1.2.2
ORapachesubversionMatch1.2.3
ORapachesubversionMatch1.3.0
ORapachesubversionMatch1.3.1
ORapachesubversionMatch1.3.2
ORapachesubversionMatch1.4.0
ORapachesubversionMatch1.4.1
ORapachesubversionMatch1.4.2
ORapachesubversionMatch1.4.3
ORapachesubversionMatch1.4.4
ORapachesubversionMatch1.4.5
ORapachesubversionMatch1.4.6
ORapachesubversionMatch1.5.0
ORapachesubversionMatch1.5.1
ORapachesubversionMatch1.5.2
ORapachesubversionMatch1.5.3
ORapachesubversionMatch1.5.4
ORapachesubversionMatch1.5.5
ORapachesubversionMatch1.5.6
ORapachesubversionMatch1.5.7
ORapachesubversionMatch1.5.8
ORapachesubversionMatch1.6.0
ORapachesubversionMatch1.6.1
ORapachesubversionMatch1.6.2
ORapachesubversionMatch1.6.3
ORapachesubversionMatch1.6.4
ORapachesubversionMatch1.6.5
ORapachesubversionMatch1.6.6
ORapachesubversionMatch1.6.7
ORapachesubversionMatch1.6.8
ORapachesubversionMatch1.6.9
ORapachesubversionMatch1.6.10
ORapachesubversionMatch1.6.11
ORapachesubversionMatch1.6.12
ORapachesubversionMatch1.6.13
ORapachesubversionMatch1.6.14
ORapachesubversionMatch1.6.15
ORapachesubversionMatch1.6.16
ORapachesubversionMatch1.6.17
ORapachesubversionMatch1.6.18
ORapachesubversionMatch1.6.19
ORapachesubversionMatch1.6.20
ORapachesubversionMatch1.6.21
ORapachesubversionMatch1.6.23
ORapachesubversionMatch1.7.0
ORapachesubversionMatch1.7.1
ORapachesubversionMatch1.7.2
ORapachesubversionMatch1.7.3
ORapachesubversionMatch1.7.4
ORapachesubversionMatch1.7.5
ORapachesubversionMatch1.7.6
ORapachesubversionMatch1.7.7
ORapachesubversionMatch1.7.8
ORapachesubversionMatch1.7.9
ORapachesubversionMatch1.7.10
ORapachesubversionMatch1.7.11
ORapachesubversionMatch1.7.12
ORapachesubversionMatch1.7.13
ORapachesubversionMatch1.7.14
ORapachesubversionMatch1.7.15
ORapachesubversionMatch1.7.16
ORapachesubversionMatch1.7.17
ORapachesubversionMatch1.7.18
ORapachesubversionMatch1.7.19
ORapachesubversionMatch1.8.0
ORapachesubversionMatch1.8.1
ORapachesubversionMatch1.8.2
ORapachesubversionMatch1.8.3
ORapachesubversionMatch1.8.4
ORapachesubversionMatch1.8.5
ORapachesubversionMatch1.8.6
ORapachesubversionMatch1.8.7
ORapachesubversionMatch1.8.8
ORapachesubversionMatch1.8.9
ORapachesubversionMatch1.8.10
Node
debiandebian_linuxMatch7.0
Node
applexcodeMatch6.1.1
References
lists.apple.com/archives/security-announce/2015/Mar/msg00003.html
rhn.redhat.com/errata/RHSA-2015-0165.html
rhn.redhat.com/errata/RHSA-2015-0166.html
secunia.com/advisories/61131
subversion.apache.org/security/CVE-2014-3580-advisory.txt
www.debian.org/security/2014/dsa-3107
www.securityfocus.com/bid/71726
www.ubuntu.com/usn/USN-2721-1
support.apple.com/HT204427
Related
openvas
openvas
Apache Subversion < 1.7.19, 1.8.x < 1.8.11 DoS Vulnerability (Feb 2016)
2016-02-08 00:00:00
Debian: Security Advisory (DLA-119-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3107-1)
2014-12-19 00:00:00
debian
debian
[SECURITY] [DSA 3107-1] subversion security update
2014-12-20 18:27:56
[SECURITY] [DLA 119-1] subversion security update
2014-12-21 22:05:08
cvelist
cvelist
CVE-2014-3580
2014-12-18 15:00:00
nessus
nessus
Debian DSA-3107-1 : subversion - security update
2014-12-23 00:00:00
Debian DLA-119-1 : subversion security update
2015-03-26 00:00:00
Fedora 21 : subversion-1.8.11-1.fc21 (2014-17118)
2015-01-06 00:00:00
ubuntucve
ubuntucve
CVE-2014-3580
2014-12-18 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3107-1] subversion security update
2014-12-23 00:00:00
Apache Subversion DoS
2015-01-13 00:00:00
[ MDVSA-2015:005 ] subversion
2015-01-13 00:00:00
osv
osv
subversion - security update
2014-12-21 00:00:00
cve
cve
CVE-2014-3580
2014-12-18 15:59:00
debiancve
debiancve
CVE-2014-3580
2014-12-18 15:59:00
prion
prion
Null pointer dereference
2014-12-18 15:59:00
archlinux
archlinux
subversion: denial of service
2014-12-16 00:00:00
redhat
redhat
(RHSA-2015:0165) Moderate: subversion security update
2015-02-10 00:00:00
(RHSA-2015:0166) Moderate: subversion security update
2015-02-10 00:00:00
centos
centos
mod_dav_svn, subversion security update
2015-02-10 22:32:42
mod_dav_svn, subversion security update
2015-02-11 00:09:48
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:13:28
fedora
fedora
[SECURITY] Fedora 20 Update: subversion-1.8.11-1.fc20
2015-01-05 07:38:55
[SECURITY] Fedora 21 Update: subversion-1.8.11-1.fc21
2015-01-05 07:39:50
mageia
mageia
Updated subversion packages fix security vulnerabilities
2014-12-23 23:35:35
amazon
amazon
Medium: mod_dav_svn, subversion
2015-06-24 10:08:00
oraclelinux
oraclelinux
subversion security update
2015-02-10 00:00:00
subversion security update
2015-02-10 00:00:00
freebsd
freebsd
subversion -- DoS vulnerabilities
2014-12-13 00:00:00
ubuntu
ubuntu
Subversion vulnerabilities
2015-08-20 00:00:00
suse
suse
Security update for subversion (important)
2017-08-17 12:10:12
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
9 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.8%
Related for NVD:CVE-2014-3580