REDHAT-BUG-709111: Null Pointer Dereference

Published May 30, 2011

Updated

A NULL pointer dereference flaw was found in the way moddavsvn module of the subversion concurrent version control system processed requests submitted against the URL of a baselined resource. A remote attacker could use this flaw to cause the httpd child process to crash.

Acknowledgements:

Red Hat would like to thank the Apache Subversion project for reporting this issue. Upstream acknowledges Joe Schaefer of Apache Software Foundation as the original reporter.

Affected Software

1 affected component

Apache subversion

Event History

May 30, 2011

Data Sourced

via Red Hat·04:51 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-709111?

The severity of REDHAT-BUG-709111 is classified as high due to the potential for a remote attacker to crash the httpd child process.

How do I fix REDHAT-BUG-709111?

To fix REDHAT-BUG-709111, apply the latest security patch provided by your distribution that addresses this vulnerability.

What software does REDHAT-BUG-709111 affect?

REDHAT-BUG-709111 affects the Apache Subversion mod_dav_svn module.

Can REDHAT-BUG-709111 be exploited remotely?

Yes, REDHAT-BUG-709111 can be exploited remotely by sending specially crafted requests to the baselined resource.

What is the impact of REDHAT-BUG-709111?

The impact of REDHAT-BUG-709111 is that it can cause a denial of service by crashing the httpd child process.