KLA10792
Denial of service vulnerability in Apache Subversion

An integer overflow was found in Apache Subversion. By exploiting this vulnerability malicious authenticated users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request.

Technical details

This vulnerability can be triggered via a skel-encoded request body which can cause out-of-bounds read and heap-based buffer overflow.

Apache Subversion versions earlier than 1.8.15
Apache Subversion 1.9 versions earlier than 1.9.3

Update to the latest version
Get Apache Subversion

Apache advisory