CVE-2015-5259 Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which t...
HighCVSS 8.6
EPSS 57.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/subversion(Debian:12) | < 1.9.3-1 | 1.9.3-1 |
| debian/subversion(Debian:13) | < 1.9.3-1 | 1.9.3-1 |
| debian/subversion(Debian:14) | < 1.9.3-1 | 1.9.3-1 |
| apache subversion | = 1.9.0 | No fix listed |
| apache subversion | = 1.9.1 | No fix listed |
| apache subversion | = 1.9.2 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- subversion.apache.org vendor-advisory
- 82300 vdb-entry
- 1034469 vdb-entry
- GLSA-201610-05 vendor-advisory