Описание
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.9.3-1ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.8.8-1ubuntu3.3]] |
| esm-infra/xenial | not-affected | 1.9.3-1ubuntu1 |
| precise | not-affected | code not present |
| precise/esm | not-affected | code not present |
| trusty | released | 1.8.8-1ubuntu3.3 |
| trusty/esm | DNE | trusty was released [1.8.8-1ubuntu3.3] |
| upstream | released | 1.8.15,1.9.3 |
| vivid | ignored | end of life |
| vivid/stable-phone-overlay | DNE |
Показывать по
EPSS
8 High
CVSS2
7.6 High
CVSS3
Связанные уязвимости
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, ...
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
EPSS
8 High
CVSS2
7.6 High
CVSS3