CVE-2010-4644: Low severity Apache subversion vulnerability
Published Jan 7, 2011
·Updated
Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Affected Software
111 affected components
Apache subversion=1.2.0
Apache subversion=1.0.4
Apache subversion=1.6.10
Apache subversion=0.22.0
Apache subversion=1.0.8
Apache subversion=1.4.5
Apache subversion=1.0.2
Apache subversion=1.1.2
Apache subversion=0.26.0
Apache subversion=0.10.1
Apache subversion=0.15
Apache subversion=1.0.9
Apache subversion=1.4.2
Apache subversion=0.37.0
Apache subversion=m2
Apache subversion=1.6.2
Apache subversion=0.9
Apache subversion=0.7
Apache subversion=0.19.0
Apache subversion=0.22.2
Apache subversion=0.12.0
Apache subversion=1.5.5
Apache subversion=1.6.5
Apache subversion=0.13.1
Apache subversion=1.1.1
Apache subversion=0.19.1
Apache subversion=1.5.3
Apache subversion=1.2.3
Apache subversion=0.20.0
Apache subversion=1.4.0
Apache subversion=0.14.5
Apache subversion=0.24.0
Apache subversion=1.4.4
Apache subversion=1.5.7
Apache subversion=0.21.0
Apache subversion=0.14.0
Apache subversion=0.17.0
Apache subversion=1.4.6
Apache subversion=1.3.1
Apache subversion=0.14.3
Apache subversion=1.6.3
Apache subversion=1.6.8
Apache subversion=0.18.1
Apache subversion=0.35.0
Apache subversion=0.30.0
Apache subversion=0.18.0
Apache subversion=1.6.13
Apache subversion=0.17.1
Apache subversion=1.0.3
Apache subversion=0.28.0
Apache subversion=0.33.1
Apache subversion=0.27.0
Apache subversion=0.10.0
Apache subversion=1.6.0
Apache subversion=1.1.4
Apache subversion=1.5.8
Apache subversion=0.10.2
Apache subversion=1.5.2
Apache subversion=0.25.0
Apache subversion<=1.6.14
Apache subversion=1.0.6
Apache subversion=1.6.7
Apache subversion=1.0.1
Apache subversion=0.36.0
Apache subversion=1.3.2
Apache subversion=1.6.12
Apache subversion=0.33.0
Apache subversion=0.24.1
Apache subversion=0.6
Apache subversion=0.14.2
Apache subversion=1.0.5
Apache subversion=1.6.1
Apache subversion=0.16
Apache subversion=0.24.2
Apache subversion=1.6.4
Apache subversion=1.2.1
Apache subversion=0.28.1
Apache subversion=0.11.1
Apache subversion=m1
Apache subversion=0.13.0
Apache subversion=0.28.2
Apache subversion=0.22.1
Apache subversion=1.4.3
Apache subversion=0.16.1
Apache subversion=0.23.0
Apache subversion=1.5.4
Apache subversion=1.3.0
Apache subversion=0.34.0
Apache subversion=0.13.2
Apache subversion=0.35.1
Apache subversion=m4\/m5
Apache subversion=1.6.11
Apache subversion=0.32.1
Apache subversion=1.1.3
Apache subversion=1.2.2
Apache subversion=1.1.0
Apache subversion=1.5.1
Apache subversion=0.8
Apache subversion=1.5.6
Apache subversion=1.0.7
Apache subversion=1.5.0
Apache subversion=0.31.0
Apache subversion=1.0.0
Apache subversion=1.6.6
Apache subversion=1.6.9
Apache subversion=0.14.1
Apache subversion=0.29.0
Apache subversion=1.4.1
Apache subversion=m3
Apache subversion=0.14.4
Apache subversion=0.20.1
Event History
Jan 7, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4644?
The severity of CVE-2010-4644 is rated as low with a score of 3.5.
2
How do I fix CVE-2010-4644?
To fix CVE-2010-4644, upgrade to Apache Subversion version 1.6.15 or later.
3
What causes CVE-2010-4644?
CVE-2010-4644 is caused by multiple memory leaks in rev_hunt.c that allow denial of service through excessive memory consumption.
4
Who is affected by CVE-2010-4644?
CVE-2010-4644 affects remote authenticated users of Apache Subversion versions prior to 1.6.15.
5
What are the potential impacts of CVE-2010-4644?
The potential impacts of CVE-2010-4644 include memory consumption leading to daemon crashes and denial of service.