LWN.net Logo

subversion: multiple vulnerabilities

Package(s):subversion CVE #(s):CVE-2013-1845 CVE-2013-1846 CVE-2013-1847 CVE-2013-1849 CVE-2013-1884
Created:April 5, 2013 Updated:April 5, 2013
Description:

From the Slackware advisory:

This update fixes some denial of service bugs:

  • mod_dav_svn excessive memory usage from property changes
  • mod_dav_svn crashes on LOCK requests against activity URLs
  • mod_dav_svn crashes on LOCK requests against non-existant URLs
  • mod_dav_svn crashes on PROPFIND requests against activity URLs
  • mod_dav_svn crashes on out of range limit in log REPORT request
Alerts:
Slackware SSA:2013-095-01 2013-04-05

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds