Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2022:2234

Опубликовано: 12 мая 2022
Источник: rocky
Оценка: Important

Описание

Important: subversion:1.10 security update

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

  • subversion: Subversion's mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
libserfaarch649.module+el8.7.0+1065+42200b2elibserf-1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
libserfaarch649.module+el8.4.0+407+38733e5alibserf-1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm
mod_dav_svnaarch645.module+el8.7.0+1065+42200b2emod_dav_svn-1.10.2-5.module+el8.7.0+1065+42200b2e.aarch64.rpm
mod_dav_svnaarch645.module+el8.6.0+974+3d7a8821mod_dav_svn-1.10.2-5.module+el8.6.0+974+3d7a8821.aarch64.rpm
subversionaarch645.module+el8.7.0+1065+42200b2esubversion-1.10.2-5.module+el8.7.0+1065+42200b2e.aarch64.rpm
subversionaarch645.module+el8.6.0+974+3d7a8821subversion-1.10.2-5.module+el8.6.0+974+3d7a8821.aarch64.rpm
subversion-develaarch645.module+el8.7.0+1065+42200b2esubversion-devel-1.10.2-5.module+el8.7.0+1065+42200b2e.aarch64.rpm
subversion-develaarch645.module+el8.6.0+974+3d7a8821subversion-devel-1.10.2-5.module+el8.6.0+974+3d7a8821.aarch64.rpm
subversion-gnomeaarch645.module+el8.7.0+1065+42200b2esubversion-gnome-1.10.2-5.module+el8.7.0+1065+42200b2e.aarch64.rpm
subversion-gnomeaarch645.module+el8.6.0+974+3d7a8821subversion-gnome-1.10.2-5.module+el8.6.0+974+3d7a8821.aarch64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 4 лет назад

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

CVSS3: 7.5
redhat
около 5 лет назад

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

CVSS3: 7.5
nvd
больше 4 лет назад

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

CVSS3: 7.5
msrc
больше 4 лет назад

Apache Subversion mod_dav_svn is vulnerable to memory corruption

CVSS3: 7.5
debian
больше 4 лет назад

Subversion's mod_dav_svn is vulnerable to memory corruption. While loo ...