CVE-2020-17525: falha em Apache Subversion
Remote unauthenticated denial-of-service in Subversion mod_authz_svn
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 40%
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
Produtos afetados
Apache Software Foundation · Apache SubversionCVEs relacionadas — Apache Subversion
No mesmo produto, das mais perigosas para as menos.
CVE-2018-11803—CVE-2018-11803EPSS 58.5%CVE-2017-9800—CVE-2017-9800EPSS 18.9%CVE-2022-24070—Apache Subversion mod_dav_svn is vulnerable to memory corruptionEPSS 9.5%CVE-2016-8734—CVE-2016-8734EPSS 6.4%CVE-2021-28544—Apache Subversion SVN authz protected copyfrom paths regressionEPSS 2.8%CVE-2024-46901LOWApache Subversion: mod_dav_svn denial-of-service via control characters in pathsEPSS 1.9%