Vulnerability Description
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Subversion | <= 1.6.14 |
Related Weaknesses (CWE)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.ht
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
- http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C3923B91
- http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+N
- http://openwall.com/lists/oss-security/2011/01/02/1Patch
- http://openwall.com/lists/oss-security/2011/01/03/9
- http://openwall.com/lists/oss-security/2011/01/04/10Patch
- http://openwall.com/lists/oss-security/2011/01/04/8Patch
- http://openwall.com/lists/oss-security/2011/01/05/4Patch
- http://secunia.com/advisories/42780Vendor Advisory
- http://secunia.com/advisories/42969
- http://secunia.com/advisories/43115
- http://secunia.com/advisories/43139
- http://secunia.com/advisories/43346
- http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES
FAQ
What is CVE-2010-4539?
CVE-2010-4539 is a vulnerability with a CVSS score of 6.8 (MEDIUM). The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NU...
How severe is CVE-2010-4539?
CVE-2010-4539 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-4539?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Subversion.