Lucene search

K
osvGoogleOSV:DLA-119-1
HistoryDec 21, 2014 - 12:00 a.m.

subversion - security update

2014-12-2100:00:00
Google
osv.dev
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

Evgeny Kotkov discovered a NULL pointer dereference while processing
REPORT requests in mod_dav_svn, the Subversion component which is used
to serve repositories with the Apache web server. A remote attacker
could abuse this vulnerability for a denial of service.

We recommend that you upgrade your subversion packages.

For Debian 6 Squeeze, these issues have been fixed in subversion version 1.6.12dfsg-7+deb6u1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P