Home

CVE-2015-0248

Description

The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
Exploitation Probability
15.803

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2014-6394,CVE-2015-0248,CVE-2015-0251,CVE-2015-7030 are affected in Command Line Tools for XCode for Mac 7.0Mac
Advanced version control system (USN-2721-1) libsvn1_1.8.10-5ubuntu1.1_i386.debLinux
Advanced version control system (USN-2721-1) libsvn1_1.8.10-5ubuntu1.1_amd64.debLinux
Advanced version control system (USN-2721-1) subversion_1.8.10-5ubuntu1.1_i386.debLinux
Advanced version control system (USN-2721-1) subversion_1.8.10-5ubuntu1.1_amd64.debLinux
Advanced version control system (USN-2721-1) libapache2-svn_1.8.8-1ubuntu3.2_all.debLinux
Advanced version control system (USN-2721-1) libapache2-svn_1.8.10-5ubuntu1.1_all.debLinux
Subversion security update (CESA-2015:1633) subversion-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) mod_dav_svn-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) mod_dav_svn-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-kde-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-kde-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-perl-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-perl-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-ruby-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-ruby-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-devel-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-devel-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-gnome-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-gnome-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-javahl-1.6.11-15.el6_7.i686.rpmLinux
Subversion security update (CESA-2015:1633) subversion-javahl-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion security update (CESA-2015:1633) subversion-svn2cl-1.6.11-15.el6_7.noarch.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update mod_dav_svn-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update mod_dav_svn-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-devel-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-devel-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-gnome-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-gnome-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-javahl-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-javahl-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-kde-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-kde-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-perl-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-perl-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-ruby-1.6.11-15.el6_7.i686.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-ruby-1.6.11-15.el6_7.x86_64.rpmLinux
(RHSA-2015:1633) Moderate: subversion security update subversion-svn2cl-1.6.11-15.el6_7.noarch.rpmLinux
Mod_dav_svn update (ELSA-2015-1633) mod_dav_svn-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion update (ELSA-2015-1633) subversion-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-devel update (ELSA-2015-1633) subversion-devel-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-gnome update (ELSA-2015-1633) subversion-gnome-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-javahl update (ELSA-2015-1633) subversion-javahl-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-kde update (ELSA-2015-1633) subversion-kde-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-perl update (ELSA-2015-1633) subversion-perl-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-ruby update (ELSA-2015-1633) subversion-ruby-1.6.11-15.el6_7.x86_64.rpmLinux
Subversion-svn2cl update (ELSA-2015-1633) subversion-svn2cl-1.6.11-15.el6_7.noarch.rpmLinux
Mod_dav_svn update (ELSA-2015-1633) mod_dav_svn-1.6.11-15.el6_7.i686.rpmLinux
Subversion update (ELSA-2015-1633) subversion-1.6.11-15.el6_7.i686.rpmLinux
Subversion-devel update (ELSA-2015-1633) subversion-devel-1.6.11-15.el6_7.i686.rpmLinux
Subversion-gnome update (ELSA-2015-1633) subversion-gnome-1.6.11-15.el6_7.i686.rpmLinux
Subversion-javahl update (ELSA-2015-1633) subversion-javahl-1.6.11-15.el6_7.i686.rpmLinux
Subversion-kde update (ELSA-2015-1633) subversion-kde-1.6.11-15.el6_7.i686.rpmLinux
Subversion-perl update (ELSA-2015-1633) subversion-perl-1.6.11-15.el6_7.i686.rpmLinux
Subversion-ruby update (ELSA-2015-1633) subversion-ruby-1.6.11-15.el6_7.i686.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-607901Command Line Tools for XCode for Mac 15.3 (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234