PT-2017-8960 · Red Hat+1 · Red Hat+3
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Subversion as packaged in Red Hat Enterprise Linux 5.11
Description
The issue allows remote authenticated users with access to the webdav repository to cause a denial of service, resulting in memory consumption and httpd crash, due to improper detection of recursion during entity expansion in the mod dontdothat component of the mod dav svn Apache module.
Recommendations
For Subversion as packaged in Red Hat Enterprise Linux 5.11, consider restricting access to the webdav repository to minimize the risk of exploitation until a patch is available.
Correção
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Subversion
Httpd
Mod Dav Svn