Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-0248

medium · 5

The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.

5
CVSS
12.1%
EPSS (exploit prob.)
96th
EPSS percentile
2015-04-08
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
apachesubversion1.6.0
apachesubversion1.6.1
apachesubversion1.6.2
apachesubversion1.6.3
apachesubversion1.6.4
apachesubversion1.6.5
apachesubversion1.6.6
apachesubversion1.6.7
apachesubversion1.6.8
apachesubversion1.6.9
apachesubversion1.6.10
apachesubversion1.6.11
apachesubversion1.6.12
apachesubversion1.6.13
apachesubversion1.6.14
apachesubversion1.6.15
apachesubversion1.6.16
apachesubversion1.6.17
apachesubversion1.6.18
apachesubversion1.6.19
apachesubversion1.6.20
apachesubversion1.6.21
apachesubversion1.6.23
apachesubversion1.7.0
apachesubversion1.7.1
apachesubversion1.7.2
apachesubversion1.7.3
apachesubversion1.7.4
apachesubversion1.7.5
apachesubversion1.7.6
apachesubversion1.7.7
apachesubversion1.7.8
apachesubversion1.7.9
apachesubversion1.7.10
apachesubversion1.7.11
apachesubversion1.7.12
apachesubversion1.7.13
apachesubversion1.7.14
apachesubversion1.7.15
apachesubversion1.7.16

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-0248