CVE-2014-3522

First published: Tue Aug 19 2014(Updated: )

The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/references
• agent/author
• agent/severity
• agent/weakness
• agent/remedy
• agent/description
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/event
• agent/tags
• agent/first-publish-date
• agent/source
• vendor/apache
• canonical/apache subversion
• version/apache subversion/1.4.0
• version/apache subversion/1.4.1
• version/apache subversion/1.4.2
• version/apache subversion/1.4.3
• version/apache subversion/1.4.4
• version/apache subversion/1.4.5
• version/apache subversion/1.4.6
• version/apache subversion/1.5.0
• version/apache subversion/1.5.1
• version/apache subversion/1.5.2
• version/apache subversion/1.5.3
• version/apache subversion/1.5.4
• version/apache subversion/1.5.5
• version/apache subversion/1.5.6
• version/apache subversion/1.5.7
• version/apache subversion/1.5.8
• version/apache subversion/1.6.0
• version/apache subversion/1.6.1
• version/apache subversion/1.6.2
• version/apache subversion/1.6.3
• version/apache subversion/1.6.4
• version/apache subversion/1.6.5
• version/apache subversion/1.6.6
• version/apache subversion/1.6.7
• version/apache subversion/1.6.8
• version/apache subversion/1.6.9
• version/apache subversion/1.6.10
• version/apache subversion/1.6.11
• version/apache subversion/1.6.12
• version/apache subversion/1.6.13
• version/apache subversion/1.6.14
• version/apache subversion/1.6.15
• version/apache subversion/1.6.16
• version/apache subversion/1.6.17
• version/apache subversion/1.6.18
• version/apache subversion/1.6.19
• version/apache subversion/1.6.20
• version/apache subversion/1.6.21
• version/apache subversion/1.6.23
• version/apache subversion/1.7.0
• version/apache subversion/1.7.1
• version/apache subversion/1.7.2
• version/apache subversion/1.7.3
• version/apache subversion/1.7.4
• version/apache subversion/1.7.5
• version/apache subversion/1.7.6
• version/apache subversion/1.7.7
• version/apache subversion/1.7.8
• version/apache subversion/1.7.9
• version/apache subversion/1.7.10
• version/apache subversion/1.7.11
• version/apache subversion/1.7.12
• version/apache subversion/1.7.13
• version/apache subversion/1.7.14
• version/apache subversion/1.7.15
• version/apache subversion/1.7.16
• version/apache subversion/1.7.17
• version/apache subversion/1.8.0
• version/apache subversion/1.8.1
• version/apache subversion/1.8.2
• version/apache subversion/1.8.3
• version/apache subversion/1.8.4
• version/apache subversion/1.8.5
• version/apache subversion/1.8.6
• version/apache subversion/1.8.7
• version/apache subversion/1.8.8
• version/apache subversion/1.8.9
• vendor/opensuse
• canonical/opensuse opensuse
• version/opensuse opensuse/12.3
• version/opensuse opensuse/13.1
• vendor/canonical
• canonical/canonical ubuntu linux
• version/canonical ubuntu linux/12.04
• version/canonical ubuntu linux/14.04
• vendor/apple
• canonical/apple xcode
• version/apple xcode/6.1.1