Lucene search
HistoryDec 18, 2014 - 3:59 p.m.
CVE-2014-8108
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.9%
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Affected configurations
Node
redhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_hpc_nodeMatch7.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_workstationMatch7.0
Node
apachesubversionMatch1.0.0
ORapachesubversionMatch1.0.1
ORapachesubversionMatch1.0.2
ORapachesubversionMatch1.0.3
ORapachesubversionMatch1.0.4
ORapachesubversionMatch1.0.5
ORapachesubversionMatch1.0.6
ORapachesubversionMatch1.0.7
ORapachesubversionMatch1.0.8
ORapachesubversionMatch1.0.9
ORapachesubversionMatch1.1.0
ORapachesubversionMatch1.1.1
ORapachesubversionMatch1.1.2
ORapachesubversionMatch1.1.3
ORapachesubversionMatch1.1.4
ORapachesubversionMatch1.2.0
ORapachesubversionMatch1.2.1
ORapachesubversionMatch1.2.2
ORapachesubversionMatch1.2.3
ORapachesubversionMatch1.3.0
ORapachesubversionMatch1.3.1
ORapachesubversionMatch1.3.2
ORapachesubversionMatch1.4.0
ORapachesubversionMatch1.4.1
ORapachesubversionMatch1.4.2
ORapachesubversionMatch1.4.3
ORapachesubversionMatch1.4.4
ORapachesubversionMatch1.4.5
ORapachesubversionMatch1.4.6
ORapachesubversionMatch1.5.0
ORapachesubversionMatch1.5.1
ORapachesubversionMatch1.5.2
ORapachesubversionMatch1.5.3
ORapachesubversionMatch1.5.4
ORapachesubversionMatch1.5.5
ORapachesubversionMatch1.5.6
ORapachesubversionMatch1.5.7
ORapachesubversionMatch1.5.8
ORapachesubversionMatch1.6.0
ORapachesubversionMatch1.6.1
ORapachesubversionMatch1.6.2
ORapachesubversionMatch1.6.3
ORapachesubversionMatch1.6.4
ORapachesubversionMatch1.6.5
ORapachesubversionMatch1.6.6
ORapachesubversionMatch1.6.7
ORapachesubversionMatch1.6.8
ORapachesubversionMatch1.6.9
ORapachesubversionMatch1.6.10
ORapachesubversionMatch1.6.11
ORapachesubversionMatch1.6.12
ORapachesubversionMatch1.6.13
ORapachesubversionMatch1.6.14
ORapachesubversionMatch1.6.15
ORapachesubversionMatch1.6.16
ORapachesubversionMatch1.6.17
ORapachesubversionMatch1.6.18
ORapachesubversionMatch1.6.19
ORapachesubversionMatch1.6.20
ORapachesubversionMatch1.6.21
ORapachesubversionMatch1.6.23
ORapachesubversionMatch1.7.0
ORapachesubversionMatch1.7.1
ORapachesubversionMatch1.7.2
ORapachesubversionMatch1.7.3
ORapachesubversionMatch1.7.4
ORapachesubversionMatch1.7.5
ORapachesubversionMatch1.7.6
ORapachesubversionMatch1.7.7
ORapachesubversionMatch1.7.8
ORapachesubversionMatch1.7.9
ORapachesubversionMatch1.7.10
ORapachesubversionMatch1.7.11
ORapachesubversionMatch1.7.12
ORapachesubversionMatch1.7.13
ORapachesubversionMatch1.7.14
ORapachesubversionMatch1.7.15
ORapachesubversionMatch1.7.16
ORapachesubversionMatch1.7.17
ORapachesubversionMatch1.7.18
ORapachesubversionMatch1.7.19
ORapachesubversionMatch1.8.0
ORapachesubversionMatch1.8.1
ORapachesubversionMatch1.8.2
ORapachesubversionMatch1.8.3
ORapachesubversionMatch1.8.4
ORapachesubversionMatch1.8.5
ORapachesubversionMatch1.8.6
ORapachesubversionMatch1.8.7
ORapachesubversionMatch1.8.8
ORapachesubversionMatch1.8.10
Node
applexcodeMatch6.1.1
Related
openvas
openvas
Apache Subversion 1.7.x, 1.8.x DoS Vulnerability
2016-02-08 00:00:00
Fedora Update for subversion FEDORA-2014-17118
2015-01-05 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-555)
2015-09-08 00:00:00
ubuntucve
ubuntucve
CVE-2014-8108
2014-12-18 00:00:00
cvelist
cvelist
CVE-2014-8108
2014-12-18 15:00:00
prion
prion
Null pointer dereference
2014-12-18 15:59:00
cve
cve
CVE-2014-8108
2014-12-18 15:59:01
debiancve
debiancve
CVE-2014-8108
2014-12-18 15:59:01
archlinux
archlinux
subversion: denial of service
2014-12-16 00:00:00
nessus
nessus
Fedora 21 : subversion-1.8.11-1.fc21 (2014-17118)
2015-01-06 00:00:00
openSUSE Security Update : subversion (openSUSE-SU-2014:1725-1)
2014-12-30 00:00:00
Apache Subversion < 1.7.19 / 1.8.x < 1.8.11 Multiple DoS
2015-01-09 00:00:00
freebsd
freebsd
subversion -- DoS vulnerabilities
2014-12-13 00:00:00
securityvulns
securityvulns
Apache Subversion DoS
2015-01-13 00:00:00
[ MDVSA-2015:005 ] subversion
2015-01-13 00:00:00
[USN-2721-1] Subversion vulnerabilities
2015-08-24 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: subversion-1.8.11-1.fc20
2015-01-05 07:38:55
[SECURITY] Fedora 21 Update: subversion-1.8.11-1.fc21
2015-01-05 07:39:50
mageia
mageia
Updated subversion packages fix security vulnerabilities
2014-12-23 23:35:35
amazon
amazon
Medium: mod_dav_svn, subversion
2015-06-24 10:08:00
redhat
redhat
(RHSA-2015:0166) Moderate: subversion security update
2015-02-10 00:00:00
oraclelinux
oraclelinux
subversion security update
2015-02-10 00:00:00
centos
centos
mod_dav_svn, subversion security update
2015-02-11 00:09:48
ubuntu
ubuntu
Subversion vulnerabilities
2015-08-20 00:00:00
suse
suse
Security update for subversion (important)
2017-08-17 12:10:12
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.9%
Related for NVD:CVE-2014-8108