CVE-2015-5343 Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server cras...
HighCVSS 7.6
EPSS 30.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/subversion(Debian:12) | < 1.9.3-1 | 1.9.3-1 |
| debian/subversion(Debian:13) | < 1.9.3-1 | 1.9.3-1 |
| debian/subversion(Debian:14) | < 1.9.3-1 | 1.9.3-1 |
| apache subversion | >= 1.7.0, <= 1.7.20 | No fix listed |
| apache subversion | >= 1.8.0, < 1.8.15 | 1.8.15 |
| apache subversion | >= 1.9.0, < 1.9.3 | 1.9.3 |
| debian linux | = 8.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-5343 vendor-advisory
- subversion.apache.org vendor-advisory
- DSA-3424 third-party-advisory vendor-advisory
- 1034470 third-party-advisory vdb-entry
- SSA:2016-097-01 third-party-advisory vendor-advisory