CVE-2013-2112: High severity subversion vulnerability
Published Jul 31, 2013
·Updated
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
Affected Software
37 affected components
Apache subversion<=1.6.21
Apache subversion=1.6.0
Apache subversion=1.6.1
Apache subversion=1.6.2
Apache subversion=1.6.3
Apache subversion=1.6.4
Apache subversion=1.6.5
Apache subversion=1.6.6
Apache subversion=1.6.7
Apache subversion=1.6.8
Apache subversion=1.6.9
Apache subversion=1.6.10
Apache subversion=1.6.11
Apache subversion=1.6.12
Apache subversion=1.6.13
Apache subversion=1.6.14
Apache subversion=1.6.15
Apache subversion=1.6.16
Apache subversion=1.6.17
Apache subversion=1.6.18
Apache subversion=1.6.19
Apache subversion=1.6.20
CollabNet Subversion=1.6.17
Apache subversion=1.7.0
Apache subversion=1.7.1
Apache subversion=1.7.2
Apache subversion=1.7.3
Apache subversion=1.7.4
Apache subversion=1.7.5
Apache subversion=1.7.6
Apache subversion=1.7.7
Apache subversion=1.7.8
Apache subversion=1.7.9
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Canonical Ubuntu Linux=13.04
openSUSE openSUSE=11.4
Event History
Jul 31, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2112?
CVE-2013-2112 has a severity rating of medium due to its potential to cause denial of service.
2
What versions of Subversion are affected by CVE-2013-2112?
CVE-2013-2112 affects Subversion versions before 1.6.23 and 1.7.x before 1.7.10.
3
How do I fix CVE-2013-2112?
To fix CVE-2013-2112, upgrade to Subversion version 1.6.23 or 1.7.10 or later.
4
What type of attack does CVE-2013-2112 facilitate?
CVE-2013-2112 facilitates a denial of service attack by allowing remote attackers to abort a connection.
5
Is there a workaround for CVE-2013-2112?
A workaround for CVE-2013-2112 is to restrict access to the svnserve server until the software is updated.