Memory corruption

2022-04-1218:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.4%

JSON

Subversion’s mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

CPENameOperatorVersion
subversionge1.14.0
subversionlt1.14.2
subversionge1.10.0
subversionlt1.10.8
macosge12.0
macoslt12.5
debian_linuxeq10.0
debian_linuxeq11.0
fedoraeq35
fedoraeq36

Name	Operator	Version
subversion	ge	1.14.0
subversion	lt	1.14.2
subversion	ge	1.10.0
subversion	lt	1.10.8
macos	ge	12.0
macos	lt	12.5
debian_linux	eq	10.0
debian_linux	eq	11.0
fedora	eq	35
fedora	eq	36