CVE-2018-11803
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits…
published February 5, 2019
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.
What it is
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.58452 · 99.1th percentile
- Published
- 2019-02-05T17:00Z
EPSS history
Timeline