CVE-2010-4539

Published: Jan 7, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Exploitability: 8.0 / Impact: 6.9

Source: NVD

Description

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.

Affected (111)

Products: Apache: Subversion

Apache

1 product

Subversion

Configuration A

111 vulnerable

Vulnerable Software	Affected Versions
Apache Subversion	Up to 1.6.14
Apache Subversion	Version 0.10.0
Apache Subversion	Version 0.10.1
Apache Subversion	Version 0.10.2
Apache Subversion	Version 0.11.1
Apache Subversion	Version 0.12.0
Apache Subversion	Version 0.13.0
Apache Subversion	Version 0.13.1
Apache Subversion	Version 0.13.2
Apache Subversion	Version 0.14.0
Apache Subversion	Version 0.14.1
Apache Subversion	Version 0.14.2
Apache Subversion	Version 0.14.3
Apache Subversion	Version 0.14.4
Apache Subversion	Version 0.14.5
Apache Subversion	Version 0.15
Apache Subversion	Version 0.16.1
Apache Subversion	Version 0.16
Apache Subversion	Version 0.17.0
Apache Subversion	Version 0.17.1
Apache Subversion	Version 0.18.0
Apache Subversion	Version 0.18.1
Apache Subversion	Version 0.19.0
Apache Subversion	Version 0.19.1
Apache Subversion	Version 0.20.0
Apache Subversion	Version 0.20.1
Apache Subversion	Version 0.21.0
Apache Subversion	Version 0.22.0
Apache Subversion	Version 0.22.1
Apache Subversion	Version 0.22.2
Apache Subversion	Version 0.23.0
Apache Subversion	Version 0.24.0
Apache Subversion	Version 0.24.1
Apache Subversion	Version 0.24.2
Apache Subversion	Version 0.25.0
Apache Subversion	Version 0.26.0
Apache Subversion	Version 0.27.0
Apache Subversion	Version 0.28.0
Apache Subversion	Version 0.28.1
Apache Subversion	Version 0.28.2
Apache Subversion	Version 0.29.0
Apache Subversion	Version 0.30.0
Apache Subversion	Version 0.31.0
Apache Subversion	Version 0.32.1
Apache Subversion	Version 0.33.0
Apache Subversion	Version 0.33.1
Apache Subversion	Version 0.34.0
Apache Subversion	Version 0.35.0
Apache Subversion	Version 0.35.1
Apache Subversion	Version 0.36.0
Apache Subversion	Version 0.37.0
Apache Subversion	Version 0.6
Apache Subversion	Version 0.7
Apache Subversion	Version 0.8
Apache Subversion	Version 0.9
Apache Subversion	Version 1.0.0
Apache Subversion	Version 1.0.1
Apache Subversion	Version 1.0.2
Apache Subversion	Version 1.0.3
Apache Subversion	Version 1.0.4
Apache Subversion	Version 1.0.5
Apache Subversion	Version 1.0.6
Apache Subversion	Version 1.0.7
Apache Subversion	Version 1.0.8
Apache Subversion	Version 1.0.9
Apache Subversion	Version 1.1.0
Apache Subversion	Version 1.1.1
Apache Subversion	Version 1.1.2
Apache Subversion	Version 1.1.3
Apache Subversion	Version 1.1.4
Apache Subversion	Version 1.2.0
Apache Subversion	Version 1.2.1
Apache Subversion	Version 1.2.2
Apache Subversion	Version 1.2.3
Apache Subversion	Version 1.3.0
Apache Subversion	Version 1.3.1
Apache Subversion	Version 1.3.2
Apache Subversion	Version 1.4.0
Apache Subversion	Version 1.4.1
Apache Subversion	Version 1.4.2
Apache Subversion	Version 1.4.3
Apache Subversion	Version 1.4.4
Apache Subversion	Version 1.4.5
Apache Subversion	Version 1.4.6
Apache Subversion	Version 1.5.0
Apache Subversion	Version 1.5.1
Apache Subversion	Version 1.5.2
Apache Subversion	Version 1.5.3
Apache Subversion	Version 1.5.4
Apache Subversion	Version 1.5.5
Apache Subversion	Version 1.5.6
Apache Subversion	Version 1.5.7
Apache Subversion	Version 1.5.8
Apache Subversion	Version 1.6.0
Apache Subversion	Version 1.6.10
Apache Subversion	Version 1.6.11
Apache Subversion	Version 1.6.12
Apache Subversion	Version 1.6.13
Apache Subversion	Version 1.6.1
Apache Subversion	Version 1.6.2
Apache Subversion	Version 1.6.3
Apache Subversion	Version 1.6.4
Apache Subversion	Version 1.6.5
Apache Subversion	Version 1.6.6
Apache Subversion	Version 1.6.7
Apache Subversion	Version 1.6.8
Apache Subversion	Version 1.6.9
Apache Subversion	Version m1
Apache Subversion	Version m2
Apache Subversion	Version m3
Apache Subversion	Version m4/m5

Related CWEs

CWE-399

References (56)

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: secalert@redhat.com

http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C3923B919-C2BE-41AD-84ED-7207837FAD1A%40ncsa.illinois.edu%3E

Source: secalert@redhat.com

http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/02/1

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/01/03/9

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/04/10

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/01/04/8

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/01/05/4

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/42780

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42969

Source: secalert@redhat.com

http://secunia.com/advisories/43115

Source: secalert@redhat.com

http://secunia.com/advisories/43139

Source: secalert@redhat.com

http://secunia.com/advisories/43346

Source: secalert@redhat.com

http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1033166

Source: secalert@redhat.com

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2011:006

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0257.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0258.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/45655

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024934

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1053-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0015

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0103

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0162

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0264

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=667407

Source: secalert@redhat.com

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/64472

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html