Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-2168

Опубликовано: 28 апр. 2016
Источник: redhat
CVSS2: 5

Описание

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5subversionWill not fix
Red Hat Enterprise Linux 6subversionWill not fix
Red Hat Enterprise Linux 7subversionWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=1331683subversion: DoS in mod_authz_svn during COPY/MOVE authorization check

5 Medium

CVSS2

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 10 лет назад

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.

CVSS3: 6.5
nvd
почти 10 лет назад

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.

CVSS3: 6.5
debian
почти 10 лет назад

The req_check_access function in the mod_authz_svn module in the httpd ...

CVSS3: 6.5
github
больше 3 лет назад

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.

suse-cvrf
почти 10 лет назад

Security update for subversion

5 Medium

CVSS2