CVE-2015-5343

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a…

published April 14, 2016

CVSS
—
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.30216 · 98.2th percentile
Published
2016-04-14T14:00Z
EPSS history
Timeline
  • 22 SEP 03:11Z
    EPSS moved 30% → 9%
    epss
  • 06 SEP 03:08Z
    EPSS moved 30% → 9%
    epss
  • 30 AUG 15:29Z
    EPSS moved 9% → 30%
    epss
  • 29 AUG 04:04Z
    EPSS moved 30% → 9%
    epss
  • 14 APR 14:00Z
    Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a…
    cvelistv5