Home > Vulnerability Database > CVE-2010-4644

Mend.io Vulnerability Database

CVE-2010-4644

Good to know:

Date: January 7, 2011

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.

Language: C

Severity Score

3.1

Related Resources (31)

Url: http://www.securityfocus.com/bid/45655

Url: http://svn.haxx.se/dev/archive-2010-11/0102.shtml

Url: http://www.redhat.com/support/errata/RHSA-2011-0258.html

Url: http://svn.apache.org/viewvc?view=revision&revision=1032808

Url: http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES

Url: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Url: http://www.ubuntu.com/usn/USN-1053-1

Url: https://access.redhat.com/security/cve/CVE-2010-4644

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-4644

Url: http://www.redhat.com/support/errata/RHSA-2011-0257.html

Url: http://secunia.com/advisories/43346

Url: http://www.vupen.com/english/advisories/2011/0015

Url: http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C4CD33B61.7030203%40thepond.com%3E

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/64473

Url: http://www.securitytracker.com/id?1024935

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-4644

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html

Url: http://secunia.com/advisories/42969

Url: http://openwall.com/lists/oss-security/2011/01/04/10

Url: http://secunia.com/advisories/42780

Url: http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E

Url: http://openwall.com/lists/oss-security/2011/01/02/1

Url: http://www.vupen.com/english/advisories/2011/0264

Url: http://secunia.com/advisories/43139

Url: http://www.vupen.com/english/advisories/2011/0162

Url: http://www.vupen.com/english/advisories/2011/0103

Url: http://secunia.com/advisories/43115

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:006

Url: http://openwall.com/lists/oss-security/2011/01/05/4

Url: http://openwall.com/lists/oss-security/2011/01/04/8

Url: https://www.mend.io/vulnerability-database/CVE-2010-4644

Severity Score

3.1

Weakness Type (CWE)

Resource Management Errors

CWE-399

Top Fix

Upgrade Version

Upgrade to version 1.7.0-alpha1

Learn More

CVSS v3.1

Base Score:	3.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	3.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	SINGLE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-4644

Good to know:

Date: January 7, 2011

Language: C

Severity Score

Related Resources (31)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?