LWN.net Logo

subversion: denial of service

Package(s):subversion CVE #(s):CVE-2013-1968 CVE-2013-2112
Created:June 10, 2013 Updated:June 28, 2013
Description: From the Debian advisory:

CVE-2013-1968: Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames. A remote attacker with a malicious client could use this flaw to disrupt the service for other users using that repository.

CVE-2013-2112: Subversion's svnserve server process may exit when an incoming TCP connection is closed early in the connection process. A remote attacker can cause svnserve to exit and thus deny service to users of the server.

Alerts:
Debian DSA-2703-1 2013-06-09
Mandriva MDVSA-2013:173 2013-06-13
openSUSE openSUSE-SU-2013:1006-1 2013-06-14
Mageia MGASA-2013-0175 2013-06-19
Ubuntu USN-1893-1 2013-06-27
openSUSE openSUSE-SU-2013:1139-1 2013-07-04
Fedora FEDORA-2013-13672 2013-08-15
Gentoo 201309-11 2013-09-23

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds