CVE-2014-3580

medium · 5

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

CVSS

11.1%

EPSS (exploit prob.)

96th

EPSS percentile

2014-12-18

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_hpc_node	6.0
redhat	enterprise_linux_hpc_node	7.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_eus	6.6.z
redhat	enterprise_linux_workstation	6.0
redhat	enterprise_linux_workstation	7.0
apache	subversion	1.0.0
apache	subversion	1.0.1
apache	subversion	1.0.2
apache	subversion	1.0.3
apache	subversion	1.0.4
apache	subversion	1.0.5
apache	subversion	1.0.6
apache	subversion	1.0.7
apache	subversion	1.0.8
apache	subversion	1.0.9
apache	subversion	1.1.0
apache	subversion	1.1.1
apache	subversion	1.1.2
apache	subversion	1.1.3
apache	subversion	1.1.4
apache	subversion	1.2.0
apache	subversion	1.2.1
apache	subversion	1.2.2
apache	subversion	1.2.3
apache	subversion	1.3.0
apache	subversion	1.3.1
apache	subversion	1.3.2
apache	subversion	1.4.0
apache	subversion	1.4.1
apache	subversion	1.4.2
apache	subversion	1.4.3
apache	subversion	1.4.4
apache	subversion	1.4.5
apache	subversion	1.4.6
apache	subversion	1.5.0
apache	subversion	1.5.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-3580