CVE-2013-4131

The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
apachesubversion
1.7.0
apachesubversion
1.7.1
apachesubversion
1.7.2
apachesubversion
1.7.3
apachesubversion
1.7.4
apachesubversion
1.7.5
apachesubversion
1.7.6
apachesubversion
1.7.7
apachesubversion
1.7.8
apachesubversion
1.7.9
apachesubversion
1.7.10
apachesubversion
1.8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
subversion
bullseye (security)
1.14.1-3+deb11u1
fixed
bullseye
1.14.1-3+deb11u1
fixed
squeeze
not-affected
wheezy
not-affected
bookworm
1.14.2-4
fixed
sid
1.14.4-2
fixed
trixie
1.14.4-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
subversion
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
not-affected
lucid
ignored
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-updates/2013-08/msg00000.html
http://subversion.apache.org/security/CVE-2013-4131-advisory.txt
http://www.securityfocus.com/bid/61454
https://bugzilla.redhat.com/show_bug.cgi?id=986194
https://exchange.xforce.ibmcloud.com/vulnerabilities/85983
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18621
http://lists.opensuse.org/opensuse-updates/2013-08/msg00000.html
http://subversion.apache.org/security/CVE-2013-4131-advisory.txt
http://www.securityfocus.com/bid/61454
https://bugzilla.redhat.com/show_bug.cgi?id=986194
https://exchange.xforce.ibmcloud.com/vulnerabilities/85983
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18621