CVE-2014-0032
- State
- Published
- Severity
- Not scored
- Published
- Feb 14, 2014
- Updated
- Aug 6, 2024
- Reserved
- Dec 3, 2013
Description
The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://svn.apache.org/repos/asf/subversion/tags/1.8.6/CHANGES
- 56822third-party-advisory
- 61321third-party-advisory
- USN-2316-1vendor-advisory
- 102927vdb-entry
- RHSA-2014:0255vendor-advisory
- [subversion-dev] 20140110 2 Re: Segfault in mod_dav_svn with repositories on /mailing-list
- http://svn.apache.org/viewvc?view=revision&revision=1557320
- 65434vdb-entry
- http://support.apple.com/kb/HT6444
- [subversion-dev] 20140110 Sin mod_dav_svn with repositories on /mailing-list
- openSUSE-SU-2014:0307vendor-advisory
- 60722third-party-advisory
- [subversion-dev] 20140110 Re: Segfault in mod_dav_svn with repositories on /mailing-list
- http://svn.apache.org/repos/asf/subversion/tags/1.7.15/CHANGES
- apache-subversion-cve20140032-dos(90986)vdb-entry
- openSUSE-SU-2014:0334vendor-advisory
- GLSA-201610-05vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.