PT-2013-4864

CVE-2013-4131

·

Published

2013-07-31

·

Updated

2024-06-15

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Subversion versions 1.7.0 through 1.7.10 Subversion versions 1.8.x before 1.8.1
Description The issue allows remote authenticated users to cause a denial of service, potentially resulting in an assertion failure or out-of-bounds read. This can be achieved by sending a certain request against a revision root, specifically via COPY, DELETE, or MOVE requests.
Recommendations For Subversion versions 1.7.0 through 1.7.10, update to a version outside of this range to resolve the issue. For Subversion versions 1.8.x before 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the mod dav svn Apache HTTPD server module until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2015-1708
MGASA-2013-0244
OPENSUSE-SU-2024:10538-1
Found an issue in the description? Have something to add? Feel free to write us 👾