CVE-2010-4644

Published: Jan 7, 2011Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.

Affected (111)

Products: Apache: Subversion

Apache

1 product

Subversion

Configuration A

111 vulnerable

Vulnerable Software	Affected Versions
Apache Subversion	Up to 1.6.14
Apache Subversion	Version 0.10.0
Apache Subversion	Version 0.10.1
Apache Subversion	Version 0.10.2
Apache Subversion	Version 0.11.1
Apache Subversion	Version 0.12.0
Apache Subversion	Version 0.13.0
Apache Subversion	Version 0.13.1
Apache Subversion	Version 0.13.2
Apache Subversion	Version 0.14.0
Apache Subversion	Version 0.14.1
Apache Subversion	Version 0.14.2
Apache Subversion	Version 0.14.3
Apache Subversion	Version 0.14.4
Apache Subversion	Version 0.14.5
Apache Subversion	Version 0.15
Apache Subversion	Version 0.16.1
Apache Subversion	Version 0.16
Apache Subversion	Version 0.17.0
Apache Subversion	Version 0.17.1
Apache Subversion	Version 0.18.0
Apache Subversion	Version 0.18.1
Apache Subversion	Version 0.19.0
Apache Subversion	Version 0.19.1
Apache Subversion	Version 0.20.0
Apache Subversion	Version 0.20.1
Apache Subversion	Version 0.21.0
Apache Subversion	Version 0.22.0
Apache Subversion	Version 0.22.1
Apache Subversion	Version 0.22.2
Apache Subversion	Version 0.23.0
Apache Subversion	Version 0.24.0
Apache Subversion	Version 0.24.1
Apache Subversion	Version 0.24.2
Apache Subversion	Version 0.25.0
Apache Subversion	Version 0.26.0
Apache Subversion	Version 0.27.0
Apache Subversion	Version 0.28.0
Apache Subversion	Version 0.28.1
Apache Subversion	Version 0.28.2
Apache Subversion	Version 0.29.0
Apache Subversion	Version 0.30.0
Apache Subversion	Version 0.31.0
Apache Subversion	Version 0.32.1
Apache Subversion	Version 0.33.0
Apache Subversion	Version 0.33.1
Apache Subversion	Version 0.34.0
Apache Subversion	Version 0.35.0
Apache Subversion	Version 0.35.1
Apache Subversion	Version 0.36.0
Apache Subversion	Version 0.37.0
Apache Subversion	Version 0.6
Apache Subversion	Version 0.7
Apache Subversion	Version 0.8
Apache Subversion	Version 0.9
Apache Subversion	Version 1.0.0
Apache Subversion	Version 1.0.1
Apache Subversion	Version 1.0.2
Apache Subversion	Version 1.0.3
Apache Subversion	Version 1.0.4
Apache Subversion	Version 1.0.5
Apache Subversion	Version 1.0.6
Apache Subversion	Version 1.0.7
Apache Subversion	Version 1.0.8
Apache Subversion	Version 1.0.9
Apache Subversion	Version 1.1.0
Apache Subversion	Version 1.1.1
Apache Subversion	Version 1.1.2
Apache Subversion	Version 1.1.3
Apache Subversion	Version 1.1.4
Apache Subversion	Version 1.2.0
Apache Subversion	Version 1.2.1
Apache Subversion	Version 1.2.2
Apache Subversion	Version 1.2.3
Apache Subversion	Version 1.3.0
Apache Subversion	Version 1.3.1
Apache Subversion	Version 1.3.2
Apache Subversion	Version 1.4.0
Apache Subversion	Version 1.4.1
Apache Subversion	Version 1.4.2
Apache Subversion	Version 1.4.3
Apache Subversion	Version 1.4.4
Apache Subversion	Version 1.4.5
Apache Subversion	Version 1.4.6
Apache Subversion	Version 1.5.0
Apache Subversion	Version 1.5.1
Apache Subversion	Version 1.5.2
Apache Subversion	Version 1.5.3
Apache Subversion	Version 1.5.4
Apache Subversion	Version 1.5.5
Apache Subversion	Version 1.5.6
Apache Subversion	Version 1.5.7
Apache Subversion	Version 1.5.8
Apache Subversion	Version 1.6.0
Apache Subversion	Version 1.6.10
Apache Subversion	Version 1.6.11
Apache Subversion	Version 1.6.12
Apache Subversion	Version 1.6.13
Apache Subversion	Version 1.6.1
Apache Subversion	Version 1.6.2
Apache Subversion	Version 1.6.3
Apache Subversion	Version 1.6.4
Apache Subversion	Version 1.6.5
Apache Subversion	Version 1.6.6
Apache Subversion	Version 1.6.7
Apache Subversion	Version 1.6.8
Apache Subversion	Version 1.6.9
Apache Subversion	Version m1
Apache Subversion	Version m2
Apache Subversion	Version m3
Apache Subversion	Version m4/m5

Related CWEs

CWE-399

References (54)

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: secalert@redhat.com

http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C4CD33B61.7030203%40thepond.com%3E

Source: secalert@redhat.com

http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/02/1

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/04/10

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/04/8

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/05/4

Source: secalert@redhat.com

http://secunia.com/advisories/42780

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42969

Source: secalert@redhat.com

http://secunia.com/advisories/43115

Source: secalert@redhat.com

http://secunia.com/advisories/43139

Source: secalert@redhat.com

http://secunia.com/advisories/43346

Source: secalert@redhat.com

http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1032808

Source: secalert@redhat.com

http://svn.haxx.se/dev/archive-2010-11/0102.shtml

Source: secalert@redhat.com

Exploit

http://www.mandriva.com/security/advisories?name=MDVSA-2011:006

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0257.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0258.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/45655

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024935

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1053-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0015

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0103

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0162

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0264

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/64473

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html