CVE-2013-4558
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2013-4558
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-4558.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2013-4558
- Downstream
- Related
- Published
- 2013-12-07T20:55:02Z
- Modified
- 2025-08-09T19:01:27Z
- Summary
- [none]
- Details
-
The getparentresource function in repos.c in moddavsvn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.
- References
-
- http://subversion.apache.org/security/CVE-2013-4558-advisory.txt
- https://github.com/apache/subversion/commit/2c77c43e4255555f3b79f761f0d141393a3856cc
- https://github.com/apache/subversion/commit/647e3f8365a74831bb915f63793b63e31fae062d
- https://bugzilla.redhat.com/show_bug.cgi?id=1033431
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html
- http://osvdb.org/100363