PublicDateAtUSN: 2019-07-31 12:00:00 UTC
Candidate: CVE-2018-11782
CRD: 2019-07-31 12:00:00 UTC
PublicDate: 2019-09-26 16:15:00 UTC
References: 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11782
 https://subversion.apache.org/security/CVE-2018-11782-advisory.txt
 https://ubuntu.com/security/notices/USN-4082-2
 https://ubuntu.com/security/notices/USN-4082-1
Description:
 In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0,
 Subversion's svnserve server process may exit when a well-formed read-only
 request produces a particular answer. This can lead to disruption for users
 of the server.
Ubuntu-Description: 
Notes: 
Bugs: 
Priority: medium
Discovered-by: Ace Olszowka
Assigned-to: 
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H [6.5 MEDIUM]


Patches_subversion:
upstream_subversion: released (1.12.2,1.10.6,1.9.12)
precise/esm_subversion: released (1.6.17dfsg-3ubuntu3.8)
trusty_subversion: ignored (out of standard support)
trusty/esm_subversion: DNE
xenial_subversion: released (1.9.3-2ubuntu1.3)
esm-infra/xenial_subversion: released (1.9.3-2ubuntu1.3)
bionic_subversion: needed
disco_subversion: ignored (reached end-of-life)
eoan_subversion: not-affected (1.10.6-1)
focal_subversion: not-affected (1.10.6-1)
groovy_subversion: not-affected (1.10.6-1)
hirsute_subversion: not-affected (1.10.6-1)
impish_subversion: not-affected (1.10.6-1)
jammy_subversion: not-affected (1.10.6-1)
devel_subversion: not-affected (1.10.6-1)