The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libapache2-mod-svn" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libapache2-svn" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn-dev" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn-doc" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn-java" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn-perl" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn-ruby" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn-ruby1.8" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "libsvn1" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "python-subversion" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "python-subversion-dbg" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "ruby-svn" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "subversion" }, { "binary_version": "1.7.13-2ubuntu2", "binary_name": "subversion-tools" } ] }