Not rated
CVE-2017-9800 A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and…
Description
A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Subversion | Versions not published |
References
- [announce] 20170810 [SECURITY][ANNOUNCE] Apache Subversion 1.9.7 released lists.apache.org
- 100259 www.securityfocus.com
- 20170810 [SECURITY][ANNOUNCE] Apache Subversion 1.9.7 released www.securityfocus.com
- RHSA-2017:2480 access.redhat.com
- 1039127 www.securitytracker.com
- GLSA-201709-09 security.gentoo.org
- DSA-3932 www.debian.org
- [subversion-commits] 20190830 svn commit: r1866117 - in /subversion/site/publish/docs/community-guide: how-to-roll-releases-in-private.txt issues.part.html lists.apache.org
- www.oracle.com www.oracle.com
- confluence.atlassian.com confluence.atlassian.com
- support.apple.com support.apple.com
- subversion.apache.org subversion.apache.org
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of Apache Subversion
The 8 CVEs of Apache Subversion →
CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn…
3.1
Low
CVE-2024-45720
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…
8.2
High
CVE-2022-24070
Subversion's mod_dav_svn is vulnerable to memory corruption
Not rated
CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should…
Not rated