The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Subversion | Apache | 1.5.0 (including) | 1.5.8 (including) |
Subversion | Apache | 1.6.0 (including) | 1.6.17 (excluding) |