FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-29 07:54:42 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
bce1f76d-82d0-11de-88ea-001a4d49522bsubversion -- heap overflow vulnerability

A Subversion Security Advisory reports:

Subversion clients and servers have multiple heap overflow issues in the parsing of binary deltas. This is related to an allocation vulnerability in the APR library used by Subversion.

Clients with commit access to a vulnerable server can cause a remote heap overflow; servers can cause a heap overflow on vulnerable clients that try to do a checkout or update.

This can lead to a DoS (an exploit has been tested) and to arbitrary code execution (no exploit tested, but the possibility is clear).


Discovery 2009-08-06
Entry 2009-08-06
Modified 2009-08-07
subversion
subversion-freebsd
p5-subversion
py-subversion
< 1.6.4

CVE-2009-2411
http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt