Evil-DB LogoEvil-DB
← All CVEs

CVE-2014-0032

medium · 4.3

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

4.3
CVSS
11.1%
EPSS (exploit prob.)
96th
EPSS percentile
2014-02-14
Published

AV:N/AC:M/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
apachesubversion1.8.0
apachesubversion1.8.1
apachesubversion1.8.2
apachesubversion1.8.3
apachesubversion1.8.4
apachesubversion1.8.5
apachesubversion<= 1.7.14
apachesubversion1.7.0
apachesubversion1.7.1
apachesubversion1.7.2
apachesubversion1.7.3
apachesubversion1.7.4
apachesubversion1.7.5
apachesubversion1.7.6
apachesubversion1.7.7
apachesubversion1.7.8
apachesubversion1.7.9
apachesubversion1.7.10
apachesubversion1.7.11
apachesubversion1.7.12
apachesubversion1.7.13

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-0032