The mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service (memory consumption and httpd crash). NOTE: Exists as a regression to CVE-2009-1955.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2017-07-14T20:00:00
Updated: 2024-08-06T01:29:18.330Z
Reserved: 2016-07-26T00:00:00
Link: CVE-2016-6312
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-07-17T13:18:06.420
Modified: 2023-11-07T02:33:57.593
Link: CVE-2016-6312
Redhat