← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2013-4558

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2013-4558
1
 
Candidate: CVE-2013-4558
2
 
PublicDate: 2013-12-07
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4558
5
 
 http://subversion.apache.org/security/CVE-2013-4558-advisory.txt
6
 
Description:
7
 
 The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD
8
 
 server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4,
9
 
 when built with assertions enabled and SVNAutoversioning is enabled, allows
10
 
 remote attackers to cause a denial of service (assertion failure and Apache
11
 
 process abort) via a non-canonical URL in a request, as demonstrated using
12
 
 a trailing /.
13
 
Ubuntu-Description:
14
 
Notes:
15
 
 mdeslaur> only affects 1.7.11 through 1.7.13
16
 
Bugs:
17
 
Priority: low
18
 
Discovered-by: Philip Martin
19
 
Assigned-to:
20
 
 
21
 
Patches_subversion:
22
 
Tags_subversion: universe-binary
23
 
upstream_subversion: released (1.7.14,1.8.5)
24
 
lucid_subversion: ignored (reached end-of-life)
25
 
precise_subversion: not-affected
26
 
quantal_subversion: not-affected
27
 
raring_subversion: not-affected
28
 
saucy_subversion: not-affected
29
 
trusty_subversion: not-affected (1.8.8-1ubuntu3)
30
 
devel_subversion: not-affected (1.8.9-2ubuntu2)