REDHAT-BUG-680755: Null Pointer Dereference
A NULL pointer dereference flaw was found in the way moddavsvn, Apache httpd module for Subversion server, processed requests to lock working copy paths in the repository, when particular Subversion client, requesting the lock, was not previously authenticated to the Subversion server. A remote attacker could use this flaw to cause a denial of service (crash of particular httpd thread, serving the request).
Acknowledgements:
Red Hat would like to thank Hyrum Wright of the Apache Subversion project for reporting this issue. Upstream acknowledges Philip Martin, WANdisco, Inc. as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-680755?
The severity of REDHAT-BUG-680755 is considered moderate due to the potential for denial of service.
How do I fix REDHAT-BUG-680755?
To fix REDHAT-BUG-680755, you should update the Apache mod_dav_svn and Apache HTTP Server to the latest versions provided by your vendor.
What impact does REDHAT-BUG-680755 have on my system?
REDHAT-BUG-680755 can lead to a denial of service, potentially causing the Apache server to become unresponsive.
Who is affected by REDHAT-BUG-680755?
Users of Apache mod_dav_svn and Apache HTTP Server who allow untrusted clients to lock working copy paths are affected by REDHAT-BUG-680755.
When was REDHAT-BUG-680755 disclosed?
REDHAT-BUG-680755 was disclosed in 2011 as part of a security advisory.