Philip Martin

The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and Apache process abort, via a non-canonical URL in a request. This can be demonstrated using a trailing /. The problem occurs when the `get parent resource` function in `repos.c` is used with assertions enabled and `SVNAutoversioning` is enabled.

The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash of the Apache HTTPD server module. This is achieved by sending a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.

The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a request containing a lock token.