Published: 02/05/2013 Updated: 19/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 up to and including 1.7.8 allows remote malicious users to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache subversion 1.7.0
apache subversion 1.7.7
apache subversion 1.7.5
apache subversion 1.7.6
apache subversion 1.7.3
apache subversion 1.7.4
apache subversion 1.7.1
apache subversion 1.7.2

Debian Bug report logs - #704940 subversion: cve-2013-1845 cve-2013-1846 cve-2013-1847 cve-2013-1849 cve-2013-1884 Package: src:subversion; Maintainer for src:subversion is James McCoy <jamessan@debianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Mon, 8 Apr 2013 00:27:01 UTC Severity: serious Tags: ...

Several security issues were fixed in Subversion ...

The mod_dav_svn Apache HTTPD server module in Subversion 170 through 178 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable ...

source: wwwsecurityfocuscom/bid/58898/info Apache Subversion is prone to a remote denial-of-service vulnerability Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions Apache Subversion versions 170 through 178 are vulnerable curl -X REPORT --data-binary @log_report 'wwwexa ...

CWE-119 http://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html https://bugzilla.redhat.com/show_bug.cgi?id=929095 http://mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvRoyVrZV12tgC0FMGrc6%2BMisd3qTcZ%2BDdpFGgTahkgAkQ%40mail.gmail.com%3E http://subversion.apache.org/security/CVE-2013-1884-advisory.txt http://www.ubuntu.com/usn/USN-1893-1 http://www.mandriva.com/security/advisories?name=MDVSA-2013:153 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18788 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704940 https://usn.ubuntu.com/1893-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/38422/https://access.redhat.com/security/cve/cve-2013-1884

CVE-2013-1884

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect