CVE-2011-1783
Fixed in a distro release EPSS 7%
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
Products: apache subversion, canonical ubuntu_linux, debian_linux, fedoraproject fedora, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.6.17dfsg-1 |
| Debian 13 | subversion | 1.6.17dfsg-1 |
| Debian 14 | subversion | 1.6.17dfsg-1 |
| Debian 5.0 | subversion | 1.5.1dfsg1-7 |
| Debian 6.0 | subversion | 1.6.12dfsg-6 |
| Red Hat Enterprise Linux 5 | mod_dav_svn | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 5 | subversion | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 5 | subversion-debuginfo | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 5 | subversion-devel | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 5 | subversion-javahl | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 5 | subversion-perl | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 5 | subversion-ruby | 0:1.6.11-7.el5_6.4 |
| Red Hat Enterprise Linux 6 | mod_dav_svn | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-debuginfo | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-devel | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-gnome | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-javahl | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-kde | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-perl | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-ruby | 0:1.6.11-2.el6_1.4 |
| Red Hat Enterprise Linux 6 | subversion-svn2cl | 0:1.6.11-2.el6_1.4 |
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 |