PT-2013-3430 · Apache+4 · Subversion+5

Publicado

2013-02-05

·

Atualizado

2024-06-15

·

CVE-2013-1847

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.0 through 1.6.20 Subversion versions 1.7.0 through 1.7.8
Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by performing an anonymous LOCK for a URL that does not exist.
Recommendations For Subversion versions 1.6.0 through 1.6.20, update to a version outside of this range to resolve the issue. For Subversion versions 1.7.0 through 1.7.8, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the mod dav svn module until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2015-1708
CESA-2013_0737
CVE-2013-1847
DLA-207-1
OPENSUSE-SU-2024:10538-1
RHSA-2013:0737
RHSA-2013_0737
SUSE-SU-2015:0709-1

Produtos afetados

Alt Linux
Apache Subversion
Centos
Red Hat
Subversion
Suse