CVE-2014-3528
Fixed in a distro release EPSS 7%
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Products: opensuse, apache subversion, canonical ubuntu_linux, apple xcode, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.8.10-1 |
| Debian 13 | subversion | 1.8.10-1 |
| Debian 14 | subversion | 1.8.10-1 |
| Red Hat Enterprise Linux 6 | mod_dav_svn | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-debuginfo | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-devel | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-gnome | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-javahl | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-kde | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-perl | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-ruby | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-svn2cl | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.el7_0 |
| Ubuntu 14.04 LTS | subversion | 1.8.8-1ubuntu3.1 |
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 |