CVE Vulnerabilities

CVE-2013-1849

Published: May 02, 2013 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
4.3 MODERATE
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Affected Software

Name Vendor Start Version End Version
Subversion Apache 1.6.0 (including) 1.6.0 (including)
Subversion Apache 1.6.1 (including) 1.6.1 (including)
Subversion Apache 1.6.2 (including) 1.6.2 (including)
Subversion Apache 1.6.3 (including) 1.6.3 (including)
Subversion Apache 1.6.4 (including) 1.6.4 (including)
Subversion Apache 1.6.5 (including) 1.6.5 (including)
Subversion Apache 1.6.6 (including) 1.6.6 (including)
Subversion Apache 1.6.7 (including) 1.6.7 (including)
Subversion Apache 1.6.8 (including) 1.6.8 (including)
Subversion Apache 1.6.9 (including) 1.6.9 (including)
Subversion Apache 1.6.10 (including) 1.6.10 (including)
Subversion Apache 1.6.11 (including) 1.6.11 (including)
Subversion Apache 1.6.12 (including) 1.6.12 (including)
Subversion Apache 1.6.13 (including) 1.6.13 (including)
Subversion Apache 1.6.14 (including) 1.6.14 (including)
Subversion Apache 1.6.15 (including) 1.6.15 (including)
Subversion Apache 1.6.16 (including) 1.6.16 (including)
Subversion Apache 1.6.17 (including) 1.6.17 (including)
Subversion Apache 1.6.18 (including) 1.6.18 (including)
Subversion Apache 1.6.19 (including) 1.6.19 (including)
Subversion Apache 1.6.20 (including) 1.6.20 (including)
Red Hat Enterprise Linux 5 RedHat subversion-0:1.6.11-11.el5_9 *
Red Hat Enterprise Linux 6 RedHat subversion-0:1.6.11-9.el6_4 *
Subversion Ubuntu hardy *
Subversion Ubuntu lucid *
Subversion Ubuntu oneiric *
Subversion Ubuntu precise *
Subversion Ubuntu quantal *
Subversion Ubuntu raring *
Subversion Ubuntu upstream *

References