Red Hat Security AdvisoryRHSA-2013:0737
subversion security update
Released 2013-04-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) mod_dav_svn-1.6.11-11.el5_9, mod_dav_svn-1.6.11-11.el5_9.i386, mod_dav_svn-1.6.11-11.el5_9.ia64 +21
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_dav_svn-1.6.11-9.el6_4, subversion-1.6.11-9.el6_4, subversion-devel-1.6.11-9.el6_4 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_dav_svn-1.6.11-9.el6_4, subversion-1.6.11-9.el6_4, subversion-devel-1.6.11-9.el6_4 +6
- Red Hat Enterprise Linux Server (v. 6) mod_dav_svn-1.6.11-9.el6_4, subversion-1.6.11-9.el6_4, subversion-1.6.11-9.el6_4.ppc +1
- Red Hat Enterprise Linux Server Optional (v. 6) subversion-1.6.11-9.el6_4, subversion-devel-1.6.11-9.el6_4, subversion-devel-1.6.11-9.el6_4.ppc +11
- Red Hat Enterprise Linux Workstation (v. 6) mod_dav_svn-1.6.11-9.el6_4, subversion-1.6.11-9.el6_4, subversion-javahl-1.6.11-9.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) subversion-1.6.11-9.el6_4, subversion-devel-1.6.11-9.el6_4, subversion-gnome-1.6.11-9.el6_4 +4
Fixes 4 records
Priority MEDIUM 54
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.51442 · Published 2013-05-02 · Fixed
Priority LOW 31
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08845 · Published 2013-05-02 · Fixed
Priority LOW 28
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an ac…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.06725 · Published 2013-05-02 · Fixed CWE-119
Priority LOW 20
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a la…
CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.05873 · Published 2013-05-02 · Fixed CWE-119
THREATIST.IORead the docs