Homepage

Improper Input Validation The advisory has been revoked - it doesn't affect any version of package subversion  (opens in a new tab)

Threat Intelligence

EPSS
11.05% (96th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1404-SUBVERSION-633340
  • published14 Feb 2014
  • disclosed14 Feb 2014
Report a new vulnerability Found a mistake?

Introduced: 14 Feb 2014

CVE-2014-0032  (opens in a new tab)
CWE-20  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream subversion package and not the subversion package as distributed by Ubuntu.

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

References