CVE-2015-0202
08.04.2015, 18:59
The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | subversion | 1.8.0 |
| apache | subversion | 1.8.1 |
| apache | subversion | 1.8.2 |
| apache | subversion | 1.8.3 |
| apache | subversion | 1.8.4 |
| apache | subversion | 1.8.5 |
| apache | subversion | 1.8.6 |
| apache | subversion | 1.8.7 |
| apache | subversion | 1.8.8 |
| apache | subversion | 1.8.9 |
| apache | subversion | 1.8.10 |
| apache | subversion | 1.8.11 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| subversion |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| subversion-bash-completion |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| subversion-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| subversion-perl |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| subversion-python |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| subversion-tools |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| mod24_dav_svn |
| ||
| mod_dav_svn |
| ||
| mod_dav_svn-debuginfo |
| ||
| subversion |
| ||
| subversion-debuginfo |
| ||
| subversion-devel |
| ||
| subversion-javahl |
| ||
| subversion-libs |
| ||
| subversion-perl |
| ||
| subversion-python26 |
| ||
| subversion-python27 |
| ||
| subversion-ruby |
| ||
| subversion-tools |
|
Common Weakness Enumeration
References