Описание
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Комментарий
Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'
Ссылки
- Vendor Advisory
- Vendor Advisory
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1Версия до 1.6.15 (включая)
Одно из
cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.10.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.10.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.10.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.11.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.12.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.13.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.13.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.13.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.14.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.14.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.14.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.14.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.14.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.14.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.15:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.16:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.16.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.17.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.17.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.18.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.18.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.19.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.19.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.20.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.20.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.21.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.22.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.22.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.22.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.23.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.24.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.24.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.24.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.25.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.26.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.27.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.28.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.28.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.28.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.29.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.30.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.31.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.32.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.33.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.33.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.34.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.35.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.35.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.36.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:0.37.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.5.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.10:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.11:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.12:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.13:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:1.6.14:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:m1:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:m2:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:m3:*:*:*:*:*:*:*
cpe:2.3:a:apache:subversion:m4\/m5:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.12113
Средний
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
ubuntu
больше 14 лет назад
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
redhat
больше 14 лет назад
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
debian
больше 14 лет назад
The mod_dav_svn module for the Apache HTTP Server, as distributed in A ...
github
около 3 лет назад
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
EPSS
Процентиль: 93%
0.12113
Средний
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other