The installed version of Subversion Server is prior to 1.9.11, 1.10.x prior to 1.10.5, 1.11.x or 1.12.x prior to 1.12.1 and is, therefore, affected by multiple vulnerabilities:

 - A denial of service (DoS) vulnerability exists in Subversion's svnserve server process due to that the process may exit when a well-formed read-only request produces a particular answer. A remote authenticated attacker can exploit this issue to cause a denial of service attack. (CVE-2018-11782)

 - A denial of service (DoS) vulnerability exists in Subversion's svnserve server process due to that the process may exit when a client sends certain sequences of protocol commands. A remote unauthenticated attacker can exploit this issue, If the server is configured with anonymous access enabled, to cause a remote denial of service attack. (CVE-2019-0203)

検出

Apache Subversion < 1.9.11/1.10.x < 1.10.5/1.11.x/1.12.x < 1.12.1の複数の脆弱性

high Nessus プラグイン ID 127137

変更ログが見つかりません