CVE-2015-0248: Medium severity subversion vulnerability
Published Apr 8, 2015
·Updated
The (1) moddavsvn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
Affected Software
64 affected components
Apache subversion=1.6.0
Apache subversion=1.6.1
Apache subversion=1.6.2
Apache subversion=1.6.3
Apache subversion=1.6.4
Apache subversion=1.6.5
Apache subversion=1.6.6
Apache subversion=1.6.7
Apache subversion=1.6.8
Apache subversion=1.6.9
Apache subversion=1.6.10
Apache subversion=1.6.11
Apache subversion=1.6.12
Apache subversion=1.6.13
Apache subversion=1.6.14
Apache subversion=1.6.15
Apache subversion=1.6.16
Apache subversion=1.6.17
Apache subversion=1.6.18
Apache subversion=1.6.19
Apache subversion=1.6.20
Apache subversion=1.6.21
Apache subversion=1.6.23
Apache subversion=1.7.0
Apache subversion=1.7.1
Apache subversion=1.7.2
Apache subversion=1.7.3
Apache subversion=1.7.4
Apache subversion=1.7.5
Apache subversion=1.7.6
Apache subversion=1.7.7
Apache subversion=1.7.8
Apache subversion=1.7.9
Apache subversion=1.7.10
Apache subversion=1.7.11
Apache subversion=1.7.12
Apache subversion=1.7.13
Apache subversion=1.7.14
Apache subversion=1.7.15
Apache subversion=1.7.16
Apache subversion=1.7.17
Apache subversion=1.7.18
Apache subversion=1.7.19
Apache subversion=1.8.0
Apache subversion=1.8.1
Apache subversion=1.8.2
Apache subversion=1.8.3
Apache subversion=1.8.4
Apache subversion=1.8.5
Apache subversion=1.8.6
Apache subversion=1.8.7
Apache subversion=1.8.8
Apache subversion=1.8.9
Apache subversion=1.8.10
Apache subversion=1.8.11
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Apple Xcode=7.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Hpc Node=6
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server Eus=6.7.z
redhat Enterprise Linux Workstation=6.0
Oracle Solaris=11.3
Event History
Apr 8, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0248?
CVE-2015-0248 has a severity rating that indicates it can lead to a denial of service due to assertion failures.
2
How do I fix CVE-2015-0248?
To mitigate CVE-2015-0248, upgrade to a fixed version of Subversion, specifically version 1.8.12 or later.
3
Which versions of Subversion are affected by CVE-2015-0248?
CVE-2015-0248 affects Subversion versions from 1.6.0 to 1.8.11.
4
What types of servers are impacted by CVE-2015-0248?
CVE-2015-0248 impacts mod_dav_svn and svnserve servers used in Subversion.
5
Can CVE-2015-0248 be exploited remotely?
Yes, CVE-2015-0248 can be exploited by remote attackers to cause a denial of service.