neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Neon | Webdav | 0.28.0 (including) | 0.28.0 (including) |
| Neon | Webdav | 0.28.1 (including) | 0.28.1 (including) |
| Neon | Webdav | 0.28.2 (including) | 0.28.2 (including) |