Executive Summary
| Summary | |
|---|---|
| Title | subversion security update |
| Informations | |||
|---|---|---|---|
| Name | RHSA-2011:0257 | First vendor Publication | 2011-02-15 |
| Vendor | RedHat | Last vendor Modification | 2011-02-15 |
| Severity (Vendor) | Moderate | Revision | 01 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:S/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 6.8 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | Low |
| Cvss Expoit Score | 8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Problem Description: Updated subversion packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 3. Description: Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. A server-side memory leak was found in the Subversion server. If a malicious, remote user performed "svn blame" or "svn log" operations on certain repository files, it could cause the Subversion server to consume a large amount of system memory. (CVE-2010-4644) A NULL pointer dereference flaw was found in the way the mod_dav_svn module (for use with the Apache HTTP Server) processed certain requests. If a malicious, remote user issued a certain type of request to display a collection of Subversion repositories on a host that has the SVNListParentPath directive enabled, it could cause the httpd process serving the request to crash. Note that SVNListParentPath is not enabled by default. (CVE-2010-4539) All Subversion users should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the Subversion server must be restarted for the update to take effect: restart httpd if you are using mod_dav_svn, or restart svnserve if it is used. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 667407 - CVE-2010-4539 Subversion (mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser 667763 - CVE-2010-4644 Subversion: DoS (memory consumption) by processing blame or log -g requests on certain files |
Original Source
| Url : https://rhn.redhat.com/errata/RHSA-2011-0257.html |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-399 | Resource Management Errors |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:21915 | |||
| Oval ID: | oval:org.mitre.oval:def:21915 | ||
| Title: | RHSA-2011:0257: subversion security update (Moderate) | ||
| Description: | Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2011:0257-01 CESA-2011:0257 CVE-2010-4539 CVE-2010-4644 | Version: | 29 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | subversion |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:23029 | |||
| Oval ID: | oval:org.mitre.oval:def:23029 | ||
| Title: | ELSA-2011:0257: subversion security update (Moderate) | ||
| Description: | Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2011:0257-01 CVE-2010-4539 CVE-2010-4644 | Version: | 13 |
| Platform(s): | Oracle Linux 5 | Product(s): | subversion |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27213 | |||
| Oval ID: | oval:org.mitre.oval:def:27213 | ||
| Title: | DEPRECATED: ELSA-2011-0257 -- subversion security update (moderate) | ||
| Description: | [1.6.11-7.1] - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672676) | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2011-0257 CVE-2010-4539 CVE-2010-4644 | Version: | 4 |
| Platform(s): | Oracle Linux 5 | Product(s): | subversion |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-07-30 | Name : CentOS Update for mod_dav_svn CESA-2011:0257 centos5 x86_64 File : nvt/gb_CESA-2011_0257_mod_dav_svn_centos5_x86_64.nasl |
| 2012-06-05 | Name : RedHat Update for subversion RHSA-2011:0258-01 File : nvt/gb_RHSA-2011_0258-01_subversion.nasl |
| 2011-08-09 | Name : CentOS Update for mod_dav_svn CESA-2011:0257 centos5 i386 File : nvt/gb_CESA-2011_0257_mod_dav_svn_centos5_i386.nasl |
| 2011-02-18 | Name : RedHat Update for subversion RHSA-2011:0257-01 File : nvt/gb_RHSA-2011_0257-01_subversion.nasl |
| 2011-02-04 | Name : Ubuntu Update for subversion vulnerabilities USN-1053-1 File : nvt/gb_ubuntu_USN_1053_1.nasl |
| 2011-01-24 | Name : FreeBSD Ports: subversion File : nvt/freebsd_subversion2.nasl |
| 2011-01-21 | Name : Fedora Update for subversion FEDORA-2011-0099 File : nvt/gb_fedora_2011_0099_subversion_fc14.nasl |
| 2011-01-21 | Name : Mandriva Update for subversion MDVSA-2011:006 (subversion) File : nvt/gb_mandriva_MDVSA_2011_006.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 70333 | Apache Subversion rev_hunt.c blame Command Multiple Memory Leak Remote DoS Apache Subversion contains a flaw that may allow a remote denial of service. The issue is triggered when multiple memory leaks in 'rev_hunt.c' occur, allowing a remote authenticated attacker to cause a denial of service by memory consumption via the -g option to the blame command. |
| 70332 | Apache Subversion Apache HTTP Server mod_dav_svn repos.c walk FunctionSVNPare... Apache Subversion contains a flaw that may allow a remote denial of service. The issue is triggered when the 'walk' function in 'repos.c' in the 'mod_dav_svn' module allows a remote, authenticated attacker to cause a NULL pointer dereference denial of service via vectors that trigger the walking of SVNParentPath collections. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-06-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_3_libsvn_auth_gnome_keyring-1-0-110119.nasl - Type : ACT_GATHER_INFO |
| 2013-09-24 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-11.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0257.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0258.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110215_subversion_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110215_subversion_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2011-05-05 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_libsvn_auth_gnome_keyring-1-0-110119.nasl - Type : ACT_GATHER_INFO |
| 2011-04-15 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0257.nasl - Type : ACT_GATHER_INFO |
| 2011-03-01 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cvs2svn-7319.nasl - Type : ACT_GATHER_INFO |
| 2011-02-16 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0257.nasl - Type : ACT_GATHER_INFO |
| 2011-02-16 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0258.nasl - Type : ACT_GATHER_INFO |
| 2011-02-02 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1053-1.nasl - Type : ACT_GATHER_INFO |
| 2011-01-28 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-006.nasl - Type : ACT_GATHER_INFO |
| 2011-01-19 | Name : The remote Fedora host is missing a security update. File : fedora_2011-0099.nasl - Type : ACT_GATHER_INFO |
| 2011-01-14 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_716120991e9311e0a587001b77d09812.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:54:20 |
|
