Non notée
CVE-2020-17525 Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the…
Description
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Subversion 1.14 | premières → < 1.14.1 | 1.14.1 |
Références
- subversion.apache.org subversion.apache.org
- [debian-lts-announce] 20210504 [SECURITY] [DLA 2646-1] subversion security update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Subversion
Les 8 CVE de Apache Subversion →
CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn…
3.1
Faible
CVE-2024-45720
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…
8.2
Élevée
CVE-2022-24070
Subversion's mod_dav_svn is vulnerable to memory corruption
Non notée
CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should…
Non notée