CVE-2013-4131

The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://lists.opensuse.org/opensuse-updates/2013-08/msg00000.html
http://subversion.apache.org/security/CVE-2013-4131-advisory.txt	Vendor Advisory
http://www.securityfocus.com/bid/61454
https://bugzilla.redhat.com/show_bug.cgi?id=986194
https://exchange.xforce.ibmcloud.com/vulnerabilities/85983
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18621

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apache:subversion:1.7.0:::::::*
	cpe:2.3:a:apache:subversion:1.7.1:::::::*
	cpe:2.3:a:apache:subversion:1.7.2:::::::*
	cpe:2.3:a:apache:subversion:1.7.3:::::::*
	cpe:2.3:a:apache:subversion:1.7.4:::::::*
	cpe:2.3:a:apache:subversion:1.7.5:::::::*
	cpe:2.3:a:apache:subversion:1.7.6:::::::*
	cpe:2.3:a:apache:subversion:1.7.7:::::::*
	cpe:2.3:a:apache:subversion:1.7.8:::::::*
	cpe:2.3:a:apache:subversion:1.7.9:::::::*
	cpe:2.3:a:apache:subversion:1.7.10:::::::*
	cpe:2.3:a:apache:subversion:1.8.0:::::::*

History

No history.

Information

Published : 2013-07-31 13:20

Updated : 2024-02-28 12:00

NVD link : CVE-2013-4131

Mitre link : CVE-2013-4131

CVE.ORG link : CVE-2013-4131

JSON object : View

Products Affected

apache

subversion

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2013-4131", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-07-31T13:20:28.880", "references": [{"url": "http://lists.opensuse.org/opensuse-updates/2013-08/msg00000.html", "source": "secalert@redhat.com"}, {"url": "http://subversion.apache.org/security/CVE-2013-4131-advisory.txt", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/61454", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=986194", "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85983", "source": "secalert@redhat.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18621", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root."}, {"lang": "es", "value": "El mod_dav_svn del m\u00f3dulo Apache HTTPD server en Subversion 1.7.0 a la 1.7.10 y 1.8.x anterior a 1.8.1, permite a usuarios autenticados remotamente provocar una denegaci\u00f3n de servicio (fallo de aserci\u00f3n o lectura fuera de rango) a trav\u00e9s de determinadas peticiones (1) COPY, (2) DELETE, o (3) MOVE contra la revisi\u00f3n de \"root\"."}], "lastModified": "2017-09-19T01:36:46.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:subversion:1.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D102460-B5D5-46C4-8021-7C3510A5FCF3"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92265E60-7BBF-4E8E-A438-4132D8FD57BB"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "346DE008-472F-47E1-8B96-F968C7D0A003"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C9BDB22-29E0-48A3-8765-FAC6A3442A35"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA5EB3A7-DE33-42CB-9B5E-646B9D4FFBFB"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F63AB9E5-FD99-40A8-B24F-623BDDBCA427"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CEA6C3E-C41B-4EF9-84E1-72BC6B72D1C6"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0B873C1-E7D6-4E55-A5A7-85000B686071"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87D2E8DD-4225-476A-AF17-7621C9A28391"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40D913E2-0FBD-4F6C-8A21-43A0681237BB"}, {"criteria": "cpe:2.3:a:apache:subversion:1.7.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B869CEB-7637-48C3-8A4C-171CFB766B97"}, {"criteria": "cpe:2.3:a:apache:subversion:1.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC0E7811-3B60-46E7-943C-E0E7ED00FB01"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}