Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2015-5343

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

  • Published: Apr 14, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-5343
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.6
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CVSS v2:

  • Severity: High
  • Score: 8
  • AV:N/AC:L/Au:S/C:P/I:P/A:C

CWEs:

Software From Fixed in
apache / subversion 1.7.0 1.7.20.x
apache / subversion 1.8.0 1.8.15
apache / subversion 1.9.0 1.9.3
debian / debian_linux 8.0 8.0.x