Published: 08/04/2015 Updated: 30/10/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The mod_dav_svn server in Subversion 1.8.0 up to and including 1.8.11 allows remote malicious users to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache subversion 1.8.0
apache subversion 1.8.8
apache subversion 1.8.9
apache subversion 1.8.3
apache subversion 1.8.4
apache subversion 1.8.5
apache subversion 1.8.1
apache subversion 1.8.2
apache subversion 1.8.10
apache subversion 1.8.11
apache subversion 1.8.6
apache subversion 1.8.7
opensuse opensuse 13.1
opensuse opensuse 13.2

Several security issues were fixed in Subversion ...

The mod_dav_svn server in Subversion 180 through 1811 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes (CVE-2015-0202) An assertion failure flaw was found in the way the SVN server processed certain requests with dynamically eva ...

The mod_dav_svn server in Subversion 180 through 1811 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes ...

CWE-399 http://www.mandriva.com/security/advisories?name=MDVSA-2015:192 http://subversion.apache.org/security/CVE-2015-0202-advisory.txt http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html http://www.securitytracker.com/id/1032100 http://www.securityfocus.com/bid/76446 http://www.ubuntu.com/usn/USN-2721-1 https://security.gentoo.org/glsa/201610-05 https://usn.ubuntu.com/2721-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-0202

CVE-2015-0202

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect