PT-2013-3543 · Apache+4 · Subversion+5

Publicado 2013-02-19 · Atualizado 2024-06-15 · CVE-2013-2112

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Subversion versions prior to 1.6.23 Subversion versions 1.7.x prior to 1.7.10

Description The issue is related to the svnserve server in Subversion, which does not properly handle aborted connection messages. This can be exploited by remote attackers to cause a denial of service, resulting in the server exiting.

Recommendations For versions prior to 1.6.23, update to version 1.6.23 or later. For versions 1.7.x prior to 1.7.10, update to version 1.7.10 or later.

Correção

Identificadores relacionados

ALT-PU-2015-1708

CESA-2014_0255

CVE-2013-2112

DSA-2703-1

MGASA-2013-0175

OPENSUSE-SU-2024:10538-1

RHSA-2014:0255

RHSA-2014_0255

SUSE-SU-2015:0709-1

Produtos afetados

Alt Linux

Apache Subversion

Centos

Red Hat

Subversion

Suse

Referências · 87

• https://suse.com/security/cve/CVE-2015-3184 · Nota
• https://suse.com/security/cve/CVE-2013-1846 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2112 · Nota
• https://bdu.fstec.ru/vul/2015-00404 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2013-2112 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0248 · Nota de Segurança
• http://debian.org/security/2013/dsa-2703 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-8734 · Nota
• https://suse.com/security/cve/CVE-2013-1968 · Nota
• https://suse.com/security/cve/CVE-2015-5259 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0032 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-1845 · Nota
• https://suse.com/security/cve/CVE-2013-4131 · Nota
• https://suse.com/security/cve/CVE-2014-8108 · Nota