The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libsvn-java": "1.7.13-2ubuntu2", "libsvn-perl": "1.7.13-2ubuntu2", "libsvn1": "1.7.13-2ubuntu2", "subversion": "1.7.13-2ubuntu2", "ruby-svn": "1.7.13-2ubuntu2", "python-subversion": "1.7.13-2ubuntu2", "subversion-tools": "1.7.13-2ubuntu2", "libsvn-ruby1.8": "1.7.13-2ubuntu2", "libapache2-svn": "1.7.13-2ubuntu2", "libapache2-mod-svn": "1.7.13-2ubuntu2", "libsvn-doc": "1.7.13-2ubuntu2", "libsvn-dev": "1.7.13-2ubuntu2", "libsvn-ruby": "1.7.13-2ubuntu2", "python-subversion-dbg": "1.7.13-2ubuntu2" } ] }