CVE-2013-4558
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2013-4558
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-4558.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2013-4558
- Related
- Published
- 2013-12-07T20:55:02Z
- Modified
- 2024-09-11T02:00:05Z
- Summary
- [none]
- Details
-
The getparentresource function in repos.c in moddavsvn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.
- References
-
- http://subversion.apache.org/security/CVE-2013-4558-advisory.txt
- https://github.com/apache/subversion/commit/2c77c43e4255555f3b79f761f0d141393a3856cc
- https://github.com/apache/subversion/commit/647e3f8365a74831bb915f63793b63e31fae062d
- https://bugzilla.redhat.com/show_bug.cgi?id=1033431
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html
- http://osvdb.org/100363
- https://security-tracker.debian.org/tracker/CVE-2013-4558
Affected packages
Debian:11 / subversion
Package
- Name
- subversion
- Purl
- pkg:deb/debian/subversion?arch=source
Debian:12 / subversion
Package
- Name
- subversion
- Purl
- pkg:deb/debian/subversion?arch=source
Debian:13 / subversion
Package
- Name
- subversion
- Purl
- pkg:deb/debian/subversion?arch=source