Bug 929082 (CVE-2013-1845)
Summary: | CVE-2013-1845 Subversion (mod_dav_svn): DoS (excessive memory use) when large number of properties are set or deleted | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> | ||||||
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||||
Status: | CLOSED ERRATA | QA Contact: | |||||||
Severity: | low | Docs Contact: | |||||||
Priority: | low | ||||||||
Version: | unspecified | CC: | jkaluza, jlieskov, jorton, rhack, security-response-team | ||||||
Target Milestone: | --- | Keywords: | Security | ||||||
Target Release: | --- | ||||||||
Hardware: | All | ||||||||
OS: | Linux | ||||||||
Whiteboard: | |||||||||
Fixed In Version: | Subversion 1.6.21, Subversion 1.7.9 | Doc Type: | Bug Fix | ||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2013-11-18 13:13:36 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Bug Depends On: | 947369, 947370, 947372, 947374, 948813 | ||||||||
Bug Blocks: | 929099 | ||||||||
Attachments: |
|
Description
Huzaifa S. Sidhpurwala
2013-03-29 08:29:55 UTC
Created attachment 717966 [details]
patch-against-1.6.20
Created attachment 717967 [details]
patch-against-1.7.8
This issue affects the version of subversion as shipped with Red Hat Enterprise Linux 5 and 6. This issue affects the version of subversion as shipped with Fedora 17 and Fedora 18. External References: http://subversion.apache.org/security/CVE-2013-1845-advisory.txt Announcements: http://mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvRoyVrZV12tgC0FMGrc6%2BMisd3qTcZ%2BDdpFGgTahkgAkQ%40mail.gmail.com%3E (v1.7.9) http://mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvSTMLbn4q_KM3Ph2UOeSiPGhEK4%3DSvwEjaHW_GUGkYWPQ%40mail.gmail.com%3E (v1.6.21) Created subversion tracking bugs for this issue Affects: fedora-all [bug 948813] This issue has been addressed in following products: Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 Via RHSA-2013:0737 https://rhn.redhat.com/errata/RHSA-2013-0737.html |