Non notée
CVE-2016-8734 Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are…
Description
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Subversion | Versions non publiées |
Références
- 94588 www.securityfocus.com
- [announce] 20161129 [SECURITY] Apache Subversion 1.9.5 released lists.apache.org
- 1037361 www.securitytracker.com
- DSA-3932 www.debian.org
- www.oracle.com www.oracle.com
- subversion.apache.org subversion.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Subversion
Les 8 CVE de Apache Subversion →
CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn…
3.1
Faible
CVE-2024-45720
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…
8.2
Élevée
CVE-2022-24070
Subversion's mod_dav_svn is vulnerable to memory corruption
Non notée
CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should…
Non notée