UbuntuUSN-812-1Subversion vulnerability
7 High
AI Score
Confidence
High
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
91.6%
Releases
- Ubuntu 9.04
- Ubuntu 8.10
- Ubuntu 8.04
- Ubuntu 6.06
Packages
- subversion -
Details
Matt Lewis discovered that Subversion did not properly sanitize its input
when processing svndiff streams, leading to various integer and heap
overflows. If a user or automated system processed crafted input, a remote
attacker could cause a denial of service or potentially execute arbitrary
code as the user processing the input.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.04 | noarch | libsvn1 | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libapache2-svn | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libsvn-dev | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libsvn-java | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libsvn-perl | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libsvn-ruby1.8 | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | python-subversion | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | python-subversion-dbg | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | subversion | <Β 1.5.4dfsg1-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libsvn1 | <Β 1.5.1dfsg1-1ubuntu2.1 | UNKNOWN |
References
Related
7 High
AI Score
Confidence
High
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
91.6%