CVE-2016-2168
05.05.2016, 18:59
The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | subversion | 𝑥 ≤ 1.8.15 |
| apache | subversion | 1.9.0 |
| apache | subversion | 1.9.1 |
| apache | subversion | 1.9.2 |
| apache | subversion | 1.9.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases