CVE-2013-1847: Null Pointer Dereference
It was found that Subversion's moddavsvn Apache HTTPD server module will crash in some circumstances when a LOCK request is made against a non-existent URL. This can lead to DoS.
The vulnerability can be triggered by doing a LOCK request against a URL for a path that does not exist in the repository or an invalid activity URL where authentication is not required for the LOCK method.
Acknowledgements:
Red Hat would like to thank the Apache Subversion project for reporting this issue. Upstream acknowledges Philip Martin and Ben Reser as the original reporter of this flaw.
Other sources
The moddavsvn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1847?
CVE-2013-1847 is classified as a denial-of-service vulnerability.
How does CVE-2013-1847 affect affected software?
CVE-2013-1847 can cause the Subversion mod_dav_svn Apache HTTPD server module to crash when a LOCK request is made against a non-existent URL.
How do I fix CVE-2013-1847?
To fix CVE-2013-1847, upgrade to Subversion version 1.6.21 or 1.7.9 or later.
What versions are affected by CVE-2013-1847?
CVE-2013-1847 affects Subversion versions before 1.6.21 and 1.7.9.
Is there a workaround for CVE-2013-1847?
There is no known effective workaround for CVE-2013-1847, so upgrading is recommended.