Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache subversion 1.8.2 vulnerabilities and exploits

(subscribe to this query)
2.4
CVSSv2
CVE-2013-4262
svnwcsub.py in Subversion 1.8.0 prior to 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py iss...
Apache Subversion 1.8.0Apache Subversion 1.8.1Apache Subversion 1.8.2
3.5
CVSSv2
CVE-2013-4558
The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 up to and including 1.7.13 and 1.8.1 up to and including 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote malicious users to cause a...
Apache Subversion 1.8.2Apache Subversion 1.7.11Apache Subversion 1.8.1Apache Subversion 1.7.12Apache Mod Dav Svn -Apache Subversion 1.7.13Apache Subversion 1.8.4Apache Subversion 1.8.3
7.8
CVSSv2
CVE-2015-0202
The mod_dav_svn server in Subversion 1.8.0 up to and including 1.8.11 allows remote malicious users to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.
Apache Subversion 1.8.0Apache Subversion 1.8.8Apache Subversion 1.8.9Apache Subversion 1.8.3Apache Subversion 1.8.4Apache Subversion 1.8.5Apache Subversion 1.8.1Apache Subversion 1.8.2Apache Subversion 1.8.10Apache Subversion 1.8.11Apache Subversion 1.8.6Apache Subversion 1.8.7Opensuse Opensuse 13.1Opensuse Opensuse 13.2
4
CVSSv2
CVE-2014-3522
The Serf RA layer in Apache Subversion 1.4.0 up to and including 1.7.x prior to 1.7.18 and 1.8.x prior to 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle malicious users to spoof se...
Apache Subversion 1.7.17Apache Subversion 1.8.7Apache Subversion 1.8.5Apache Subversion 1.8.6Apache Subversion 1.7.13Apache Subversion 1.7.14Apache Subversion 1.7.7Apache Subversion 1.7.8Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.21Apache Subversion 1.6.23Apache Subversion 1.6.9Apache Subversion 1.5.0Apache Subversion 1.5.8Apache Subversion 1.4.0Apache Subversion 1.8.2Apache Subversion 1.8.3Apache Subversion 1.8.4Apache Subversion 1.7.11Apache Subversion 1.7.12Apache Subversion 1.7.5
4
CVSSv2
CVE-2014-3504
The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 up to and including 1.3.x prior to 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, w...
Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.8.2Apache Subversion 1.4.5Apache Subversion 1.7.3Apache Subversion 1.6.20Apache Subversion 1.7.17Apache Subversion 1.8.0Apache Subversion 1.4.2Apache Subversion 1.6.2Apache Subversion 1.7.1Apache Subversion 1.7.11Apache Subversion 1.7.16Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.5.5Apache Subversion 1.7.4Apache Subversion 1.6.21Apache Subversion 1.6.5Apache Subversion 1.7.6Apache Subversion 1.5.3Apache Subversion 1.4.0
6.5
CVSSv2
CVE-2013-4246
libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x prior to 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.
Apache Subversion 1.8.0Apache Subversion 1.8.1
2.4
CVSSv2
CVE-2013-7393
The daemonize.py module in Subversion 1.8.0 prior to 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on differ...
Apache Subversion 1.8.0Apache Subversion 1.8.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook