Arch Linux Security Advisory ASA-201412-17 ========================================== Severity: Medium Date : 2014-12-16 CVE-ID : CVE-2014-3580 CVE-2014-8108 Package : subversion Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE-2014 Summary ======= The package subversion before version 1.8.11-1 is vulnerable to denial of service in mod_dav_svn through multiple remotely triggerable crashes. Resolution ========== Upgrade to 1.8.11-1. # pacman -Syu "subversion>=1.8.11-1" The problems have been fixed upstream in version 1.8.11. Workaround ========== None. Description =========== - CVE-2014-3580 (denial of service) A NULL pointer dereference flaw was found in the way mod_dav_svn handled REPORT requests. A remote, unauthenticated attacker could use a crafted REPORT request to crash mod_dav_svn. - CVE-2014-8108 (denial of service) A NULL pointer dereference flaw was found in the way mod_dav_svn handled URIs for virtual transaction names. A remote, unauthenticated attacker could send a request for a virtual transaction name that does not exist, causing mod_dav_svn to crash. Impact ====== A remote attacker is able to send specially crafted requests causing mod_dav_svn to crash leading to denial of service. References ========== https://subversion.apache.org/security/CVE-2014-3580-advisory.txt https://subversion.apache.org/security/CVE-2014-8108-advisory.txt https://access.redhat.com/security/cve/CVE-2014-3580 https://access.redhat.com/security/cve/CVE-2014-8108