CVE-2014-3580

MEDIUM · 5.0 CVSS Gepubliceerd: 18-12-2014

Beschrijving

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

Vendors

Redhat Apache Debian Apple

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Subversion Debian Linux Xcode

References

lists.apple.com
rhn.redhat.com
rhn.redhat.com
secunia.com
subversion.apache.org
www.debian.org
www.securityfocus.com
www.ubuntu.com
support.apple.com