CVE-2020-17525

Debian Bug report logs - #982464 subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn Package: src:subversion; Maintainer for src:subversion is James McCoy <jamessan@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 10 Feb 2021 14:39:02 UTC Sever ...

Several security issues were fixed in subversion ...

Synopsis Important: subversion:110 security update Type/Severity Security Advisory: Important Topic An update for the subversion:110 module is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A C ...

Synopsis Important: subversion:110 security update Type/Severity Security Advisory: Important Topic An update for the subversion:110 module is now available for Red Hat Enterprise Linux 82 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A C ...

Synopsis Important: subversion:110 security update Type/Severity Security Advisory: Important Topic An update for the subversion:110 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scorin ...

Thomas Akesson discovered a remotely triggerable vulnerability in the mod_authz_svn module in Subversion, a version control system When using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option an unauthenticated remote client can take advantage of this flaw to cause a denial of service by sending a request for a non-existing ...

A null-pointer-dereference flaw was found in mod_authz_svn of subversion This flaw allows a remote, unauthenticated attacker to cause a denial of service in some server configurations The highest threat from this vulnerability is to system availability (CVE-2020-17525) ...

Subversion's mod_authz_svn module in version 190 up to 1106 and 1110 up to 1140 will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL ...