Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1884
HistoryMay 02, 2013 - 12:00 a.m.

CVE-2013-1884

2013-05-0200:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.064 Low

EPSS

Percentile

93.6%

The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through
1.7.8 allows remote attackers to cause a denial of service (segmentation
fault and crash) via a log REPORT request with an invalid limit, which
triggers an access of an uninitialized variable.

Notes

Author Note
mdeslaur 1.7.0+
OSVersionArchitecturePackageVersionFilename
ubuntu12.10noarchsubversion< 1.7.5-1ubuntu2.1UNKNOWN
ubuntu13.04noarchsubversion< 1.7.5-1ubuntu3.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.064 Low

EPSS

Percentile

93.6%