Home > Vulnerability Database > CVE-2010-4539

Mend.io Vulnerability Database

CVE-2010-4539

Good to know:

Date: January 7, 2011

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.

Language: C

Severity Score

6.5

Related Resources (32)

Url: https://bugzilla.redhat.com/show_bug.cgi?id=667407

Url: http://www.securityfocus.com/bid/45655

Url: http://www.redhat.com/support/errata/RHSA-2011-0258.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-4539

Url: http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES

Url: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Url: http://www.ubuntu.com/usn/USN-1053-1

Url: http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C3923B919-C2BE-41AD-84ED-7207837FAD1A%40ncsa.illinois.edu%3E

Url: http://www.redhat.com/support/errata/RHSA-2011-0257.html

Url: http://svn.apache.org/viewvc?view=revision&revision=1033166

Url: http://secunia.com/advisories/43346

Url: http://www.vupen.com/english/advisories/2011/0015

Url: http://www.securitytracker.com/id?1024934

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/64472

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html

Url: http://secunia.com/advisories/42969

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-4539

Url: http://openwall.com/lists/oss-security/2011/01/04/10

Url: http://secunia.com/advisories/42780

Url: https://access.redhat.com/security/cve/CVE-2010-4539

Url: http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E

Url: http://openwall.com/lists/oss-security/2011/01/02/1

Url: http://www.vupen.com/english/advisories/2011/0264

Url: http://secunia.com/advisories/43139

Url: http://www.vupen.com/english/advisories/2011/0162

Url: http://www.vupen.com/english/advisories/2011/0103

Url: http://secunia.com/advisories/43115

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:006

Url: http://openwall.com/lists/oss-security/2011/01/05/4

Url: http://openwall.com/lists/oss-security/2011/01/04/8

Url: http://openwall.com/lists/oss-security/2011/01/03/9

Url: https://www.mend.io/vulnerability-database/CVE-2010-4539

Severity Score

6.5

Weakness Type (CWE)

Resource Management Errors

CWE-399

Top Fix

Upgrade Version

Upgrade to version 1.7.0-alpha1

Learn More

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-4539

Good to know:

Date: January 7, 2011

Language: C

Severity Score

Related Resources (32)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?