CVE-2014-8108
Fixed in a distro release EPSS 10%
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation, apache subversion, apple xcode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.8.10-5 |
| Debian 13 | subversion | 1.8.10-5 |
| Debian 14 | subversion | 1.8.10-5 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.el7_0 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.el7_0 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | subversion | 1.8.19-25.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | subversion | 1.8.19-25.3.1 |
| Ubuntu 14.04 LTS | subversion | 1.8.8-1ubuntu3.2 |
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 |