AZL-9368
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-9368.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-9368
- Upstream
- Published
- 2022-04-12T18:15:09Z
- Modified
- 2026-04-01T05:23:39.672974Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2022-24070 affecting package subversion for versions less than 1.14.2-1
- Details
-
Subversion's moddavsvn is vulnerable to memory corruption. While looking up path-based authorization rules, moddavsvn servers may attempt to use memory which has already been freed. Affected Subversion moddavsvn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use moddavsvn are not affected.
- References