Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5xg-c32g-4v99

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

EPSS

Процентиль: 95%
0.19092
Средний

7.6 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.6
ubuntu
почти 10 лет назад

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

redhat
около 10 лет назад

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

CVSS3: 7.6
nvd
почти 10 лет назад

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

CVSS3: 7.6
debian
почти 10 лет назад

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, ...

suse-cvrf
около 10 лет назад

Security update for subversion

EPSS

Процентиль: 95%
0.19092
Средний

7.6 High

CVSS3

Дефекты

CWE-119