Unrated
Apache Subversion mod_dav_svn is vulnerable to memory corruption
CVE-2022-24070
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-24070 subversion Fixed in: 1.14.2-r0
- Debian DEBIAN-CVE-2022-24070 subversion Fixed in: 1.14.1-3+deb11u1
Original description The description as published by the source.
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory debian.org
- report bz.apache.org
- web cwiki.apache.org
- web issues.apache.org
- web support.apple.com
- web seclists.org