CVE-2008-3746
Fixed in a distro release EPSS 2%
neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function.
Products: webdav neon
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neon27 | 0.28.2-4 |
| Debian 13 | neon27 | 0.28.2-4 |
| Debian 14 | neon27 | 0.28.2-4 |
| openSUSE Tumbleweed | neon | 0.31.2-2.6 |