CVE-2004-1343 CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of....
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cvs | = 1.10 | No fix listed |
| cvs | = 1.10.6 | No fix listed |
| cvs | = 1.10.7 | No fix listed |
| cvs | = 1.10.8 | No fix listed |
| cvs | = 1.11 | No fix listed |
| cvs | = 1.11.1 | No fix listed |
| cvs | = 1.11.1_p1 | No fix listed |
| cvs | = 1.11.2 | No fix listed |
| cvs | = 1.11.3 | No fix listed |
| cvs | = 1.11.4 | No fix listed |
| cvs | = 1.11.5 | No fix listed |
| cvs | = 1.11.6 | No fix listed |
| cvs | = 1.11.10 | No fix listed |
| cvs | = 1.11.11 | No fix listed |
| cvs | = 1.11.14 | No fix listed |
| cvs | = 1.11.15 | No fix listed |
| cvs | = 1.11.16 | No fix listed |
| cvs | = 1.12 | No fix listed |
| debian/cvs(Debian:12) | < 1:1.12.9-12 | 1:1.12.9-12 |
| debian/cvs(Debian:13) | < 1:1.12.9-12 | 1:1.12.9-12 |
| debian/cvs(Debian:14) | < 1:1.12.9-12 | 1:1.12.9-12 |
References
- DSA-715 patch vendor-advisory
- Debian Security Tracker CVE-2004-1343 vendor-advisory