CVE-2016-8734

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-8734

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-8734.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-8734

Related

Published

2017-10-16T13:29:00Z

Modified

2024-10-11T11:40:58Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

References

Affected packages

Debian:11 / subversion

Package

Name: subversion
Purl: pkg:deb/debian/subversion?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.9.5-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / subversion

Package

Name: subversion
Purl: pkg:deb/debian/subversion?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.9.5-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / subversion

Package

Name: subversion
Purl: pkg:deb/debian/subversion?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.9.5-1

Ecosystem specific

{
    "urgency": "low"
}

Git / github.com/apache/subversion

Affected ranges

Type: GIT
Repo: https://github.com/apache/subversion
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

037cdbc70830a2978e43f651ca704b10ec9d3a05

Last affected

08a4688bda9204c93c638be81101c8dd20d275e0

Last affected

0f1c5a0b48ff010953bbb9cb8ff05e79427c0396

Last affected

12d9bb7e55eaef253e94ff41e9cdcb8f0280ae4d

Last affected

13ba6f378327b181245755b79f5ab588ab60a884

Last affected

17d7735f656588e79641897aebd990d028b92cea

Last affected

1fceb5d76f0bb17c0b54c2f04813f5aa9da44b3b

Last affected

2421fae8f18f6e50e351c2b6c5bdb0618511db35

Last affected

28a7ba4756f227cf24be56a6ecdff9bbefd489df

Last affected

2a1da160aefefbb8f6c7a401348de9c5e909838c

Last affected

2b4c2e8507385d92549fab3bda844a96cb6a6ba4

Last affected

2b7574250bb2dab00cf0fa840e38807c2e95e177

Last affected

2c9ec8ef409389cdaa605a1faaa61a41907badb0

Last affected

325d5a072757c45aab0ccf802190e8ecccd0dd1e

Last affected

330041fe2b6c49b7dd5e2defd6193b6bc263c325

Last affected

3377d6f8941ff55b1fdeaa0e8862b03902a8f9d7

Last affected

37fc8aa1484784480ac71ab85ed8a79529487e0f

Last affected

3b96e0b7c8a3225be56b6a987f83a12524f88754

Last affected

3dd825ec65165222c2347104d174b69b7ba2b0c9

Last affected

3dec6a0529685631fa7a4975a59424f815f121cb

Last affected

3ecc188f6b06a9349768f5594eec7c4fa9bb92f1

Last affected

3f582fc98d82c0f76f7b9e695c53942f99560d11

Last affected

42bf8e6f315a69eb1f9a0b293858a6d4642cc1dd

Last affected

461ae9d97a387551b152a39a8c026e9743452f3d

Last affected

48e6cf3eafddbd5f318c4c5d6023c8b5371ac532

Last affected

4c63e7cdc7aeea8e3e38551c0665af7a495c2952

Last affected

50f98394c60fc723984c625c7b7bf59eb002778a

Last affected

5630bac78658acd256bd64506e8f69045ba78003

Last affected

5991d4f8e73f1cf7abf47db68279877f2874a552

Last affected

5d9f0e6726e28e5cf43e857033cc6658fb1d0bb5

Last affected

60f2a5a23627cfffc2ca861f25319065f0437cee

Last affected

6808637504c0078473113e13f8f50c15b577d0d2

Last affected

681d68ef6a6fd67a6f31e6d90e83e65e6a29c0ae

Last affected

69a337f1474944529566bc32581770f17cc0af0c

Last affected

6a714a24a489050364efe1db2bc9ec894bbce349

Last affected

6ac0bbcfd6f3ea8d90fde706a7c9cfeb29d7c349

Last affected

6dc74f99b8037019274c6c95f1165640fceb076d

Last affected

7025076179c1227204d6cf090128e16a80b7367e

Last affected

75f6673eb83f0820569fe8c4c1a4eddeb847a2f4

Last affected

7665a987cb74e217474f21ec063dbf24c69b3624

Last affected

766e99ae0460ce797d263ad63100e275736428ff

Last affected

7842912504294e6241ff0fdb7971e91224d4dfdb

Last affected

7afc8760cd51ab4e8038f13f742d291c04421b32

Last affected

7e3c0e7e2396df845a8eb85d6620cfba0892f71b

Last affected

7f3ce689da1650b081a95ff0c1da1918f8564d10

Last affected

7f64f8a2a65527ee358fb2ccc7a6eb9afeecc48c

Last affected

8190064c7276405e2d6d822e8553b514058d180e

Last affected

82240dd68da26ea86821dbb4e0f370099f77b3d1

Last affected

85cdf5358d526ad1b39632d1810bcef96e578554

Last affected

862040e936a1aa9eb23214cbba3cf32ece30ce6b

Last affected

874751937dace02c3389aafbb722c23f646e3f9f

Last affected

8a154b5fb76ffacf4170ddded153f49348d3df12

Last affected

a17f1a75f43e99e99bd0c42ab51c9ad7801a8863

Last affected

a3d58ef8e16565cfbb28f5ac7f567bd0034cfa96

Last affected

abb5942b351e18952486f778e07c359514519dab

Last affected

ac3365e6673cb1a95902a4a84a9a3318add52fab

Last affected

b3677ed3b5adca7f4e679884ec154cce5c73a48c

Last affected

b6f6139e28393f76ce24949071ea49389c3f097c

Last affected

ba6f0f6e07a946a762ef4e065c131488425e6d8b

Last affected

bd6c215f0b0c95a57cda7098adac1cc60f379578

Last affected

bfcfce5f8efc0244011cf51c1ad7359021068b60

Last affected

c038871c2a6b281f30d893949dc0d1705c3876a6

Last affected

c2c48e71cb85fb85c1146ac66be6a20d5f772459

Last affected

ca672a52b1eab7e53f7c14aab8f90557d30317c0

Last affected

d52e4d8128461942ce4d495fbf5c4ef020bb2e2a

Last affected

d5c449a05c043ec247cb68cb2bbb891779eb8566

Last affected

d76021d164fc3a617120ebd81f6ae5e43ad8a0c4

Last affected

d790585b8e2667f86b1d2a306a6fd3172aed1b2b

Last affected

dc0c17ccf32a0e33ab857bb29359a78f253fd8f4

Last affected

e03e7ac2e5341db1dc6646ecbd5893fc72f7d5cd

Last affected

e096a5e22aa3a8bca30e2a4c6fa4b4a5bfd1f38f

Last affected

ec2d4883a917c6108d43b992f431b33ab3a67536

Last affected

ecd3ad3f00605c7a271d57a176061bb006a06ecd

Last affected

ee06e5a53995fbea8b44030eb0cac8b944269d66

Last affected

efeb54930ea525412643809a05473a075c04521c

Last affected

eff6041bbd2da842ad7c510f3f269921add2d435

Last affected

f1dccf04a58fef0de466918a583067ceaccf9a3b

Last affected

f56cb3f5443be1cdc84201b8bcea476e6388fdfe

Last affected

fb1a48ea90df410f16f6c6ffe47fc0d5b1f782cc

Last affected

fc59b48000a772c634e9316f85649a1982ce37ef