In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.
En Apache Subversion versiones hasta 1.9.10, 1.10.4, 1.12.0 incluyéndolas, el proceso del servidor svnserve de Subversion puede cerrarse cuando una petición de solo lectura bien formada produce una respuesta en particular. Esto puede conllevar a interrupciones para usuarios del servidor.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:S/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | SINGLE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-20
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| apache | subversion | * | <built-in method update of dict object at 0x7e6110a54400> | Application |
| apache | subversion | * | <built-in method update of dict object at 0x7e611239dd40> | Application |
| apache | subversion | * | <built-in method update of dict object at 0x7e6110a559c0> | Application |
| apache | subversion | 1.12.0 | <built-in method update of dict object at 0x7e60e86cc800> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:apache:subversion:1.12.0:*:*:*:*:*:*:* |