CVE-2013-4246
HighSummary
In Apache Subversion 1.8.x before version 1.8.2, a vulnerability exists that may allow remote authenticated users with commit access to corrupt FSFS repositories and cause denial of service or obtain sensitive information by editing packed revision properties.
Risk Assessment
The organization may be exposed to data corruption in repositories and potential leaks of sensitive information, which could lead to serious legal and reputational consequences.
Recommendation
It is recommended to upgrade Apache Subversion to version 1.8.2 or later to mitigate this vulnerability and to monitor repository access for unauthorized activities.
Other vulnerabilities in Apache Subversion
See all- CVE-2015-5343High
Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
- CVE-2015-5259High
Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.
Original NVD description (English source)
libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.