PT-2021-7366 · Apache+11 · Mod Dav Svn+12
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Subversion mod dav svn versions 1.10.0 through 1.14.1
Description
The issue is related to memory corruption in Subversion's mod dav svn. It occurs when mod dav svn servers attempt to use memory that has already been freed while looking up path-based authorization rules. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For Subversion mod dav svn versions 1.10.0 through 1.14.1, update to a version that addresses the memory corruption issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Red Os
Rocky Linux
Subversion
Suse
Ubuntu
Mod Dav Svn