CVE-2014-3580
Fixed in a distro release EPSS 11%
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, apache subversion, debian_linux, apple xcode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.8.10-5 |
| Debian 13 | subversion | 1.8.10-5 |
| Debian 14 | subversion | 1.8.10-5 |
| Debian 6.0 | subversion | 1.6.12dfsg-7+deb6u1 |
| Debian 7 | subversion | 1.6.17dfsg-4+deb7u7 |
| Red Hat Enterprise Linux 6 | mod_dav_svn | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-debuginfo | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-devel | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-gnome | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-javahl | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-kde | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-perl | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-ruby | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 6 | subversion-svn2cl | 0:1.6.11-12.el6_6 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.el7_0 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | subversion | 1.8.19-25.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | subversion | 1.8.19-25.3.1 |
| Ubuntu 14.04 LTS | subversion | 1.8.8-1ubuntu3.2 |
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 |