Not rated
CVE-2022-24070 Subversion's mod_dav_svn is vulnerable to memory corruption
Description
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Subversion | Versions not published |
References
- issues.apache.org issues.apache.org
- bz.apache.org bz.apache.org
- cwiki.apache.org cwiki.apache.org
- DSA-5119 www.debian.org
- FEDORA-2022-13cc09ecf2 lists.fedoraproject.org
- FEDORA-2022-2af658b090 lists.fedoraproject.org
- support.apple.com support.apple.com
- 20220721 APPLE-SA-2022-07-20-2 macOS Monterey 12.5 seclists.org
Timeline
- Published
- Last modified
Other CVEs of Apache Subversion
The 8 CVEs of Apache Subversion →
CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn…
3.1
Low
CVE-2024-45720
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…
8.2
High
CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should…
Not rated
CVE-2020-17525
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the…
Not rated