Published: 31/07/2013 Updated: 30/10/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The svnserve server in Subversion prior to 1.6.23 and 1.7.x prior to 1.7.10 allows remote malicious users to cause a denial of service (exit) by aborting a connection.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache subversion 1.6.15
apache subversion 1.6.3
apache subversion 1.6.2
apache subversion 1.6.11
apache subversion 1.6.10
apache subversion 1.6.17
apache subversion 1.6.14
apache subversion 1.6.20
apache subversion 1.6.7
apache subversion 1.6.6
apache subversion 1.6.16
apache subversion 1.6.13
apache subversion 1.6.19
apache subversion 1.6.18
apache subversion 1.6.5
apache subversion 1.6.4
apache subversion 1.6.12
collabnet subversion 1.6.17
apache subversion
apache subversion 1.6.1
apache subversion 1.6.0
apache subversion 1.6.9
apache subversion 1.6.8
apache subversion 1.7.4
apache subversion 1.7.3
apache subversion 1.7.0
apache subversion 1.7.8
apache subversion 1.7.7
apache subversion 1.7.2
apache subversion 1.7.1
apache subversion 1.7.6
apache subversion 1.7.5
apache subversion 1.7.9
opensuse opensuse 11.4
canonical ubuntu linux 13.04
canonical ubuntu linux 12.10
canonical ubuntu linux 12.04

Several security issues were fixed in Subversion ...

Several vulnerabilities were discovered in Subversion, a version control system The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1968 Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames A remote attacker with a malicious cli ...

Debian Bug report logs - #717794 subversion: CVE-2013-4131 Package: subversion; Maintainer for subversion is James McCoy <jamessan@debianorg>; Source for subversion is src:subversion (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 25 Jul 2013 07:51:02 UTC Severity: important Tags: ...

Debian Bug report logs - #721542 subversion: CVE-2013-4277: local privilege escalation vulnerability via symlink attack Package: subversion; Maintainer for subversion is James McCoy <jamessan@debianorg>; Source for subversion is src:subversion (PTS, buildd, popcon) Reported by: Salvatore Bonaccorso <carnil@debianorg> ...

Debian Bug report logs - #711033 CVE-2013-2112 CVE-2013-1968 Package: subversion; Maintainer for subversion is James McCoy <jamessan@debianorg>; Source for subversion is src:subversion (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Tue, 4 Jun 2013 07:42:01 UTC Severity: grave Tags: pa ...

The svnserve server in Subversion before 1623 and 17x before 1710 allows remote attackers to cause a denial of service (exit) by aborting a connection ...

NVD-CWE-noinfo https://subversion.apache.org/security/CVE-2013-2112-advisory.txt http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvTxsMFeHgc8bK2V-2PrSrKoBffTi8%2BxbHA5tocrrewWew%40mail.gmail.com%3E http://www.debian.org/security/2013/dsa-2703 http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkUP9Tzz6KFDw%40mail.gmail.com%3E http://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html http://www.ubuntu.com/usn/USN-1893-1 http://rhn.redhat.com/errata/RHSA-2014-0255.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19057 https://usn.ubuntu.com/1893-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-2112

CVE-2013-2112

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect