CVE-2013-4131: Buffer Overflow
A denial of service flaw was found in the way moddavsvn module of Subversion (SVN), a concurrent version control system, used to process certain MOVE, COPY, or DELETE HTTP requests (requests that originated or targeted against a revision root). A remote attacker, with commit access / privileges could use this flaw to cause denial of service (depending on the Apache httpd web server configuration either child assertion failure or crash [prefork MPM configuration] or failure to handle other requests, originally scheduled to be handled within the same thread [threaded MPM configuration] due to a process termination) by issuing a specially-crafted SVN commit request.
Vulnerable package versions: Subversion HTTPD servers 1.7.0 through 1.7.10 (inclusive) Subversion HTTPD servers 1.8.0 (including 1.8.0 release candidates). svnserve (any version) is not vulnerable. Subversion 1.6.x is not vulnerable.
Other sources
The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4131?
CVE-2013-4131 has been rated as a denial of service vulnerability due to its potential to cause server crashes.
How do I fix CVE-2013-4131?
To fix CVE-2013-4131, you should upgrade your Subversion installation to a version that is not affected such as 1.8.2 or later.
Which versions are affected by CVE-2013-4131?
CVE-2013-4131 affects Subversion versions 1.7.0 up to 1.8.1.
Can a remote attacker exploit CVE-2013-4131?
Yes, a remote attacker with commit access can exploit CVE-2013-4131 by sending specially crafted HTTP requests.
Is CVE-2013-4131 related to mod_dav_svn?
Yes, CVE-2013-4131 specifically affects the mod_dav_svn module used in Subversion.