CVE-2011-1783
06.06.2011, 19:55
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | subversion | 1.5.0 ≤ 𝑥 ≤ 1.5.8 |
| apache | subversion | 1.6.0 ≤ 𝑥 < 1.6.17 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 10.10 |
| canonical | ubuntu_linux | 11.04 |
| debian | debian_linux | 5.0 |
| debian | debian_linux | 6.0 |
| apple | mac_os_x | 𝑥 < 10.7.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| subversion |
| ||||||||||||
| subversion-bash-completion |
| ||||||||||||
| subversion-devel |
| ||||||||||||
| subversion-perl |
| ||||||||||||
| subversion-python |
| ||||||||||||
| subversion-tools |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| mod |
| ||
| subversion |
| ||
| subversion-devel |
| ||
| subversion-gnome |
| ||
| subversion-javahl |
| ||
| subversion-kde |
| ||
| subversion-perl |
| ||
| subversion-ruby |
| ||
| subversion-svn2cl |
|
References