CVE-2011-0715
Published: 11 March 2011
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Notes
| Author | Note |
|---|---|
| mdeslaur | on karmic and higher, binary is in universe. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
subversion Launchpad, Ubuntu, Debian |
dapper |
Released
(1.3.1-3ubuntu1.4)
|
| hardy |
Released
(1.4.6dfsg1-2ubuntu1.3)
|
|
| karmic |
Released
(1.6.5dfsg-1ubuntu1.2)
|
|
| lucid |
Released
(1.6.6dfsg-2ubuntu1.2)
|
|
| maverick |
Released
(1.6.12dfsg-1ubuntu1.2)
|
|
| upstream |
Released
(1.6.16)
|
|
|
Patches: upstream: http://svn.apache.org/viewvc?view=revision&revision=1071307 upstream: http://svn.apache.org/viewvc?view=revision&revision=1071239 |
||