CVE-2015-0202: High severity subversion vulnerability
Published Apr 8, 2015
·Updated
The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.
Affected Software
14 affected components
Apache subversion=1.8.0
Apache subversion=1.8.1
Apache subversion=1.8.2
Apache subversion=1.8.3
Apache subversion=1.8.4
Apache subversion=1.8.5
Apache subversion=1.8.6
Apache subversion=1.8.7
Apache subversion=1.8.8
Apache subversion=1.8.9
Apache subversion=1.8.10
Apache subversion=1.8.11
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Event History
Apr 8, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0202?
CVE-2015-0202 has a high severity as it allows a remote attacker to cause a denial of service.
2
How do I fix CVE-2015-0202?
To fix CVE-2015-0202, upgrade your Subversion installation to version 1.8.12 or later.
3
Which versions of Subversion are affected by CVE-2015-0202?
CVE-2015-0202 affects Subversion versions from 1.8.0 to 1.8.11.
4
What type of attack does CVE-2015-0202 facilitate?
CVE-2015-0202 facilitates a denial of service attack through excessive memory consumption.
5
Is there a patch available for CVE-2015-0202?
Yes, patches are available in the updated versions of Subversion released after 1.8.11.