CVE-2022-24070

 

Published at: - 12-04-2022 08:15

Last modified: - 22-07-2022 08:15

Total changes: - 6

Description

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://bz.apache.org/bugzilla/show_bug.cgi?id=65861
• https://issues.apache.org/jira/browse/SVN-4880
• https://cwiki.apache.org/confluence/display/HTTPD/ModuleLife
• DSA-5119-Third Party Advisory
• FEDORA-2022-13cc09ecf2-
• FEDORA-2022-2af658b090-
• https://support.apple.com/kb/HT213345
• 20220721 APPLE-SA-2022-07-20-2 macOS Monterey 12.5-

 

Keywords

NVD

 

CVE-2022-24070

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures