CVE-2013-4558

The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built…

published December 7, 2013

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05882 · 93.2th percentile
Published
2013-12-07T20:00Z
EPSS history
Timeline
  • 07 DEC 20:00Z
    The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built…
    cvelistv5