CVE-2011-0715

Published: Mar 11, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.

Affected (112)

Products: Apache: Subversion

Apache

1 product

Subversion

Configuration A

112 vulnerable

Vulnerable Software	Affected Versions
Apache Subversion	Up to 1.6.15
Apache Subversion	Version 0.10.0
Apache Subversion	Version 0.10.1
Apache Subversion	Version 0.10.2
Apache Subversion	Version 0.11.1
Apache Subversion	Version 0.12.0
Apache Subversion	Version 0.13.0
Apache Subversion	Version 0.13.1
Apache Subversion	Version 0.13.2
Apache Subversion	Version 0.14.0
Apache Subversion	Version 0.14.1
Apache Subversion	Version 0.14.2
Apache Subversion	Version 0.14.3
Apache Subversion	Version 0.14.4
Apache Subversion	Version 0.14.5
Apache Subversion	Version 0.15
Apache Subversion	Version 0.16.1
Apache Subversion	Version 0.16
Apache Subversion	Version 0.17.0
Apache Subversion	Version 0.17.1
Apache Subversion	Version 0.18.0
Apache Subversion	Version 0.18.1
Apache Subversion	Version 0.19.0
Apache Subversion	Version 0.19.1
Apache Subversion	Version 0.20.0
Apache Subversion	Version 0.20.1
Apache Subversion	Version 0.21.0
Apache Subversion	Version 0.22.0
Apache Subversion	Version 0.22.1
Apache Subversion	Version 0.22.2
Apache Subversion	Version 0.23.0
Apache Subversion	Version 0.24.0
Apache Subversion	Version 0.24.1
Apache Subversion	Version 0.24.2
Apache Subversion	Version 0.25.0
Apache Subversion	Version 0.26.0
Apache Subversion	Version 0.27.0
Apache Subversion	Version 0.28.0
Apache Subversion	Version 0.28.1
Apache Subversion	Version 0.28.2
Apache Subversion	Version 0.29.0
Apache Subversion	Version 0.30.0
Apache Subversion	Version 0.31.0
Apache Subversion	Version 0.32.1
Apache Subversion	Version 0.33.0
Apache Subversion	Version 0.33.1
Apache Subversion	Version 0.34.0
Apache Subversion	Version 0.35.0
Apache Subversion	Version 0.35.1
Apache Subversion	Version 0.36.0
Apache Subversion	Version 0.37.0
Apache Subversion	Version 0.6
Apache Subversion	Version 0.7
Apache Subversion	Version 0.8
Apache Subversion	Version 0.9
Apache Subversion	Version 1.0.0
Apache Subversion	Version 1.0.1
Apache Subversion	Version 1.0.2
Apache Subversion	Version 1.0.3
Apache Subversion	Version 1.0.4
Apache Subversion	Version 1.0.5
Apache Subversion	Version 1.0.6
Apache Subversion	Version 1.0.7
Apache Subversion	Version 1.0.8
Apache Subversion	Version 1.0.9
Apache Subversion	Version 1.1.0
Apache Subversion	Version 1.1.1
Apache Subversion	Version 1.1.2
Apache Subversion	Version 1.1.3
Apache Subversion	Version 1.1.4
Apache Subversion	Version 1.2.0
Apache Subversion	Version 1.2.1
Apache Subversion	Version 1.2.2
Apache Subversion	Version 1.2.3
Apache Subversion	Version 1.3.0
Apache Subversion	Version 1.3.1
Apache Subversion	Version 1.3.2
Apache Subversion	Version 1.4.0
Apache Subversion	Version 1.4.1
Apache Subversion	Version 1.4.2
Apache Subversion	Version 1.4.3
Apache Subversion	Version 1.4.4
Apache Subversion	Version 1.4.5
Apache Subversion	Version 1.4.6
Apache Subversion	Version 1.5.0
Apache Subversion	Version 1.5.1
Apache Subversion	Version 1.5.2
Apache Subversion	Version 1.5.3
Apache Subversion	Version 1.5.4
Apache Subversion	Version 1.5.5
Apache Subversion	Version 1.5.6
Apache Subversion	Version 1.5.7
Apache Subversion	Version 1.5.8
Apache Subversion	Version 1.6.0
Apache Subversion	Version 1.6.10
Apache Subversion	Version 1.6.11
Apache Subversion	Version 1.6.12
Apache Subversion	Version 1.6.13
Apache Subversion	Version 1.6.14
Apache Subversion	Version 1.6.1
Apache Subversion	Version 1.6.2
Apache Subversion	Version 1.6.3
Apache Subversion	Version 1.6.4
Apache Subversion	Version 1.6.5
Apache Subversion	Version 1.6.6
Apache Subversion	Version 1.6.7
Apache Subversion	Version 1.6.8
Apache Subversion	Version 1.6.9
Apache Subversion	Version m1
Apache Subversion	Version m2
Apache Subversion	Version m3
Apache Subversion	Version m4/m5

References (68)

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056072.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056736.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: secalert@redhat.com

http://secunia.com/advisories/43583

Source: secalert@redhat.com

http://secunia.com/advisories/43603

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43672

Source: secalert@redhat.com

http://secunia.com/advisories/43794

Source: secalert@redhat.com

http://securitytracker.com/id?1025161

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.479953

Source: secalert@redhat.com

http://subversion.apache.org/security/CVE-2011-0715-advisory.txt

Source: secalert@redhat.com

Vendor Advisory

http://support.apple.com/kb/HT4723

Source: secalert@redhat.com

http://svn.apache.org/repos/asf/subversion/tags/1.6.16/CHANGES

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1071239

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1071307

Source: secalert@redhat.com

Patch

http://svn.haxx.se/dev/archive-2011-03/0122.shtml

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2011/dsa-2181

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:067

Source: secalert@redhat.com

http://www.osvdb.org/70964

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46734

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1096-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0567

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0568

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0624

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0660

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0684

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0776

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0885

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=680755

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/65876

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18967

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2011-0327.html

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2011-0328.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html