Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4644
HistoryJan 07, 2011 - 12:00 a.m.

CVE-2010-4644

2011-01-0700:00:00
ubuntu.com
ubuntu.com
12

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.3%

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15
allow remote authenticated users to cause a denial of service (memory
consumption and daemon crash) via the -g option to the blame command.

Bugs

Notes

Author Note
mdeslaur PoC: http://svn.haxx.se/dev/archive-2010-11/0163.shtml hardy and older don’t support -g, 1.5.x and higher only
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchsubversion< 1.6.5dfsg-1ubuntu1.1UNKNOWN
ubuntu10.04noarchsubversion< 1.6.6dfsg-2ubuntu1.1UNKNOWN
ubuntu10.10noarchsubversion< 1.6.12dfsg-1ubuntu1.1UNKNOWN

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.3%