The (1) moddavsvn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
{ "binaries": [ { "binary_name": "libapache2-mod-svn", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libapache2-mod-svn-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libapache2-svn", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-dev", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-dev-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-doc", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-java", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-java-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-perl", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-perl-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn-ruby1.8", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn1", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "libsvn1-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "python-subversion", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "python-subversion-dbg", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "python-subversion-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "ruby-svn", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "ruby-svn-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "subversion", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "subversion-dbg", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "subversion-dbgsym", "binary_version": "1.8.8-1ubuntu3.2" }, { "binary_name": "subversion-tools", "binary_version": "1.8.8-1ubuntu3.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }