CVE-2013-4131 The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds....
MediumCVSS 4.0
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/subversion(Debian:12) | < 1.7.13-1 | 1.7.13-1 |
| debian/subversion(Debian:13) | < 1.7.13-1 | 1.7.13-1 |
| debian/subversion(Debian:14) | < 1.7.13-1 | 1.7.13-1 |
| apache subversion | = 1.7.0 | No fix listed |
| apache subversion | = 1.7.1 | No fix listed |
| apache subversion | = 1.7.2 | No fix listed |
| apache subversion | = 1.7.3 | No fix listed |
| apache subversion | = 1.7.4 | No fix listed |
| apache subversion | = 1.7.5 | No fix listed |
| apache subversion | = 1.7.6 | No fix listed |
| apache subversion | = 1.7.7 | No fix listed |
| apache subversion | = 1.7.8 | No fix listed |
| apache subversion | = 1.7.9 | No fix listed |
| apache subversion | = 1.7.10 | No fix listed |
| apache subversion | = 1.8.0 | No fix listed |
References
- Debian Security Tracker CVE-2013-4131 vendor-advisory
- openSUSE-SU-2013:1286 vendor-advisory
- subversion.apache.org vendor-advisory
- 61454 vdb-entry
- bugzilla.redhat.com
- apache-subversion-cve20134131-dos(85983) vdb-entry
- oval:org.mitre.oval:def:18621 signature vdb-entry
- bugs.debian.org issue-tracking