CVE-2015-0248

MEDIUM · 5.0 CVSS Gepubliceerd: 08-04-2015 CWE-399

Beschrijving

The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.

Vendors

Apache Opensuse Apple Redhat Oracle

Affected products

Subversion Opensuse Xcode Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Solaris

References

lists.apple.com
lists.opensuse.org
rhn.redhat.com
rhn.redhat.com
subversion.apache.org
www.debian.org
www.mandriva.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
security.gentoo.org
support.apple.com