PT-2013-3495 · Apache+4 · Subversion+5

Stefan Sperling · Publicado 2013-02-19 · Atualizado 2024-06-15 · CVE-2013-1968

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Subversion versions prior to 1.6.23 Subversion versions 1.7.x prior to 1.7.10

Description The issue allows remote authenticated users to cause a denial of service by corrupting the FSFS repository. This is due to incorrect handling of file names, specifically when a newline character is present in a file name. The exploitation of this issue can lead to repository corruption, making it unusable.

Recommendations For Subversion versions prior to 1.6.23, update to version 1.6.23 or later to resolve the issue. For Subversion versions 1.7.x prior to 1.7.10, update to version 1.7.10 or later to resolve the issue.

Correção

Identificadores relacionados

ALT-PU-2015-1708

CESA-2014_0255

CVE-2013-1968

DSA-2703-1

MGASA-2013-0175

OPENSUSE-SU-2024:10538-1

RHSA-2014:0255

RHSA-2014_0255

SUSE-SU-2013_1217-1

SUSE-SU-2015:0709-1

Produtos afetados

Alt Linux

Apache Subversion

Centos

Red Hat

Subversion

Suse

Referências · 95

• https://suse.com/security/cve/CVE-2015-3184 · Nota
• https://suse.com/security/cve/CVE-2013-1846 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2112 · Nota
• https://bdu.fstec.ru/vul/2015-00404 · Nota de Segurança
• https://subversion.apache.org/security/CVE-2013-1968-advisory.txt · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0248 · Nota de Segurança
• http://debian.org/security/2013/dsa-2703 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-8734 · Nota
• https://suse.com/security/cve/CVE-2013-1968 · Nota
• https://suse.com/security/cve/CVE-2015-5259 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://download.novell.com/patch/finder/?keywords=f1e3ccee3d6965d85d10d4c4ff3e6746 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0032 · Nota de Segurança
• http://download.novell.com/patch/finder/?keywords=64648aca6f33898d15cd8c0c4956232f · Nota