CVE-2013-1968: Medium severity subversion vulnerability
Published Jul 31, 2013
·Updated
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
Affected Software
37 affected components
Apache subversion<=1.6.21
Apache subversion=1.6.0
Apache subversion=1.6.1
Apache subversion=1.6.2
Apache subversion=1.6.3
Apache subversion=1.6.4
Apache subversion=1.6.5
Apache subversion=1.6.6
Apache subversion=1.6.7
Apache subversion=1.6.8
Apache subversion=1.6.9
Apache subversion=1.6.10
Apache subversion=1.6.11
Apache subversion=1.6.12
Apache subversion=1.6.13
Apache subversion=1.6.14
Apache subversion=1.6.15
Apache subversion=1.6.16
Apache subversion=1.6.17
Apache subversion=1.6.18
Apache subversion=1.6.19
Apache subversion=1.6.20
CollabNet Subversion=1.6.17
Apache subversion=1.7.0
Apache subversion=1.7.1
Apache subversion=1.7.2
Apache subversion=1.7.3
Apache subversion=1.7.4
Apache subversion=1.7.5
Apache subversion=1.7.6
Apache subversion=1.7.7
Apache subversion=1.7.8
Apache subversion=1.7.9
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Canonical Ubuntu Linux=13.04
openSUSE openSUSE=11.4
Event History
Jul 31, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1968?
CVE-2013-1968 is classified as a denial of service vulnerability that can lead to FSFS repository corruption.
2
How do I fix CVE-2013-1968?
To remediate CVE-2013-1968, upgrade your Subversion installation to version 1.6.23 or 1.7.10 or later.
3
What versions are affected by CVE-2013-1968?
CVE-2013-1968 affects all versions of Subversion prior to 1.6.23 and versions 1.7.x before 1.7.10.
4
Can attackers exploit CVE-2013-1968 without authentication?
No, CVE-2013-1968 requires remote authenticated users to exploit the vulnerability.
5
What impact does CVE-2013-1968 have on repositories?
CVE-2013-1968 can cause corruption of FSFS repositories, resulting in potential data loss.