Lucene search

K
mageiaGentoo FoundationMGASA-2014-0104
HistoryFeb 28, 2014 - 1:58 a.m.

Updated subversion packages fix CVE-2014-0032

2014-02-2801:58:42
Gentoo Foundation
advisories.mageia.org
21

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.1

Percentile

95.0%

Updated subversion packages fix security vulnerability: The mod_dav_svn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via an OPTIONS request (CVE-2014-0032). The package has been patched to correct this issue. Additionally, the svnserve service was using the incorrect root directory for the repositories. This has also been corrected. The root directory is now defined in the /etc/sysconfig/svnserve file.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchsubversion< 1.7.14-1.1subversion-1.7.14-1.1.mga3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.1

Percentile

95.0%