Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-8734 →
DEBIAN-CVE-2016-8734
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
subversion
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]
Debian:13
subversion
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]
Debian:14
subversion
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]
Références
- advisory security-tracker.debian.org