CVE-2020-17525

CVE-2020-17525 affects Subversion’s mod_authz_svn. A crash occurs when using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client requests a non-existent repository URL, potentially disrupting service. Fixed in various builds: mod_dav_svn + mod_authz_svn servers ...

CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

Important: subversion

Issue Overview: A null-pointer-dereference flaw was found in modauthzsvn of subversion. This flaw allows a remote, unauthenticated attacker to cause a denial of service in some server configurations. The highest threat from this vulnerability is to system availability. CVE-2020-17525 Affected...

Amazon Linux AMI : subversion (ALAS-2021-1483)

The version of subversion installed on the remote host is prior to 1.9.7-1.61. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1483 advisory. A null-pointer-dereference flaw was found in modauthzsvn of subversion. This flaw allows a remote, unauthenticated attacker to...

Fedora 32 : subversion (2021-16e51e39a6)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-16e51e39a6 advisory. - Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client...

subversion:1.10 security update

subversion 1.10.2-4 - add security fix for CVE-2020-17525...

Oracle Linux 8 : subversion:1.10 (ELSA-2021-0507)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0507 advisory. subversion 1.10.2-4 - add security fix for CVE-2020-17525 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

openSUSE Security Update : subversion (openSUSE-2021-280)

This update for subversion fixes the following issues : - CVE-2020-17525: A null-pointer-dereference has been found in modauthzsvn that results in a remote unauthenticated Denial-of-Service in some server configurations bsc1181687. This update was imported from the SUSE:SLE-15:Update update...

Important: Red Hat Security Advisory: subversion:1.10 security update

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

subversion:1.10 security update

An update is available for subversion, utf8proc, libserf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Subversion SVN is a concurrent version control system...

RHEL 8 : subversion:1.10 (RHSA-2021:0508)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0508 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of fil...

RHEL 8 : subversion:1.10 (RHSA-2021:0509)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0509 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of fil...

RHEL 8 : subversion:1.10 (RHSA-2021:0507)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0507 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of fil...

[SECURITY] [DSA 4851-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4851-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 13, 2021 https://www.debian.org/security/faq -...

Security update for subversion (important)

openSUSE Security Update: Security update for subversion Announcement ID: openSUSE-SU-2021:0280-1 Rating: important References: 1181687 Cross-References: CVE-2020-17525 CVSS scores: CVE-2020-17525 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An upda...

Fedora 33 : subversion (2021-a3a0273cb2)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-a3a0273cb2 advisory. - Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client...

FreeBSD : mod_dav_svn -- server crash (06a5abd4-6bc2-11eb-b292-90e2baa3bafc)

Subversion project reports : Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. C Tenable Network Security, Inc. The descriptive text and packag...

SUSE SLED15 / SLES15 Security Update : subversion (SUSE-SU-2021:0425-1)

This update for subversion fixes the following issues : CVE-2020-17525: A null-pointer-dereference has been found in modauthzsvn that results in a remote unauthenticated Denial-of-Service in some server configurations bsc1181687. Note that Tenable Network Security has extracted the preceding...

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...