Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-0032

Опубликовано: 14 фев. 2014
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 4.3

Описание

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

РелизСтатусПримечание
devel

not-affected

1.8.8-1ubuntu3
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [1.8.8-1ubuntu3]]
lucid

ignored

end of life
precise

released

1.6.17dfsg-3ubuntu3.4
quantal

ignored

end of life
saucy

ignored

end of life
trusty

not-affected

1.8.8-1ubuntu3
trusty/esm

DNE

trusty was not-affected [1.8.8-1ubuntu3]
upstream

released

1.7.14,1.8.8

Показывать по

EPSS

Процентиль: 96%
0.28012
Средний

4.3 Medium

CVSS2

Связанные уязвимости

redhat
больше 11 лет назад

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

nvd
больше 11 лет назад

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

debian
больше 11 лет назад

The get_resource function in repos.c in the mod_dav_svn module in Apac ...

github
больше 3 лет назад

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

oracle-oval
больше 11 лет назад

ELSA-2014-0255: subversion security update (MODERATE)

EPSS

Процентиль: 96%
0.28012
Средний

4.3 Medium

CVSS2