CVE-2015-0248
Fixed in a distro release EPSS 13%
The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
Products: apache subversion, opensuse, apple xcode, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.8.10-6 |
| Debian 13 | subversion | 1.8.10-6 |
| Debian 14 | subversion | 1.8.10-6 |
| Debian 6.0 | subversion | 1.6.12dfsg-7+deb6u2 |
| Debian 7 | subversion | 1.6.17dfsg-4+deb7u9 |
| Red Hat Enterprise Linux 6 | mod_dav_svn | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-debuginfo | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-devel | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-gnome | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-javahl | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-kde | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-perl | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-ruby | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-svn2cl | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.el7_1.1 |
| SUSE Linux Enterprise Software Development Kit 12 | subversion | 1.8.10-12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | subversion | 1.8.19-25.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | subversion | 1.8.19-25.3.1 |
| Ubuntu 14.04 LTS | subversion | 1.8.8-1ubuntu3.2 |
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 |