Lucene search
Ubuntu.comUB:CVE-2014-3580HistoryDec 18, 2014 - 12:00 a.m.
CVE-2014-3580
2014-12-1800:00:00
ubuntu.com
ubuntu.com
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.017 Low
EPSS
Percentile
87.6%
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before
1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of
service (NULL pointer dereference and server crash) via a REPORT request
for a resource that does not exist.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | Debian update introduced a regression. Please see: https://www.debian.org/security/2014/dsa-3107-2 |
| tyhicks | libapache2-mod-svn (libapache2-svn in older releases) is a universe binary |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | subversion | < 1.6.17dfsg-3ubuntu3.5 | UNKNOWN |
| ubuntu | 14.04 | noarch | subversion | < 1.8.8-1ubuntu3.2 | UNKNOWN |
| ubuntu | 15.04 | noarch | subversion | < 1.8.10-5ubuntu1 | UNKNOWN |
Related
prion
prion
Null pointer dereference
2014-12-18 15:59:00
debian
debian
[SECURITY] [DLA 119-1] subversion security update
2014-12-21 22:05:30
[SECURITY] [DSA 3107-1] subversion security update
2014-12-20 18:28:25
openvas
openvas
Debian: Security Advisory (DSA-3107-1)
2014-12-19 00:00:00
Apache Subversion < 1.7.19, 1.8.x < 1.8.11 DoS Vulnerability (Feb 2016)
2016-02-08 00:00:00
Debian: Security Advisory (DLA-119-1)
2023-03-08 00:00:00
debiancve
debiancve
CVE-2014-3580
2014-12-18 15:59:00
cve
cve
CVE-2014-3580
2014-12-18 15:59:00
cvelist
cvelist
CVE-2014-3580
2014-12-18 15:00:00
osv
osv
subversion - security update
2014-12-21 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3107-1] subversion security update
2014-12-23 00:00:00
[ MDVSA-2015:005 ] subversion
2015-01-13 00:00:00
Apache Subversion DoS
2015-01-13 00:00:00
nessus
nessus
Debian DLA-119-1 : subversion security update
2015-03-26 00:00:00
Debian DSA-3107-1 : subversion - security update
2014-12-23 00:00:00
Amazon Linux AMI : mod_dav_svn / subversion (ALAS-2015-555)
2015-06-25 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: subversion-1.8.11-1.fc21
2015-01-05 07:39:50
[SECURITY] Fedora 20 Update: subversion-1.8.11-1.fc20
2015-01-05 07:38:55
amazon
amazon
Medium: mod_dav_svn, subversion
2015-06-24 10:08:00
archlinux
archlinux
subversion: denial of service
2014-12-16 00:00:00
oraclelinux
oraclelinux
subversion security update
2015-02-10 00:00:00
subversion security update
2015-02-10 00:00:00
freebsd
freebsd
subversion -- DoS vulnerabilities
2014-12-13 00:00:00
redhat
redhat
(RHSA-2015:0165) Moderate: subversion security update
2015-02-10 00:00:00
(RHSA-2015:0166) Moderate: subversion security update
2015-02-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:13:28
centos
centos
mod_dav_svn, subversion security update
2015-02-10 22:32:42
mod_dav_svn, subversion security update
2015-02-11 00:09:48
mageia
mageia
Updated subversion packages fix security vulnerabilities
2014-12-23 23:35:35
ubuntu
ubuntu
Subversion vulnerabilities
2015-08-20 00:00:00
suse
suse
Security update for subversion (important)
2017-08-17 12:10:12
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.017 Low
EPSS
Percentile
87.6%
Related for UB:CVE-2014-3580