Apache Subversion Server Component Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	45655
Class:	Unknown
CVE:	CVE-2010-4539 CVE-2010-4644
Remote:	Yes
Local:	No
Published:	Nov 24 2010 12:00AM
Updated:	May 07 2015 05:07PM
Credit:	Rob Kooper and Chris Tashjian <br>
Vulnerable:	S.u.S.E. openSUSE 11.4 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux 5 Server Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Apache Subversion 1.6.10 Apache Subversion 1.6.13 Apache Subversion 1.6.12 Apache Subversion 1.6.11
Not Vulnerable:	Apache Subversion 1.6.15

Apache Subversion Server Component Multiple Remote Denial Of Service Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Subversion Server Component Multiple Remote Denial Of Service Vulnerabilities

References:

• "svn blame -g" causing svnserve to hang & mem usage to hit 2GB (Chris Tashjian)
  
• Apache Subversion (Apache)
  
• Apache Subversion 1.6.15 Released (Apache)
  
• Apache-SVN Revision 1033166 (stsp)
  
• Fix blame -g server-side memory leaks. (pburba)