VDB-107073 · CVE-2017-9800 · HT208103

Apple Xcode up to 8.3.3 subversion input validation

A vulnerability classified as critical has been found in Apple Xcode up to 8.3.3 (Programming Tool Software). This affects an unknown functionality of the component subversion. Upgrading to version 9.0 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10819958	01/14/2021	VulD...	person_name	Jonathan Nieder	securityfocus.com	01/14/2021	accepted	70
10819957	01/14/2021	VulD...	cvss2_nvd_basescore	7.5	nist.gov	01/14/2021	accepted	90
10819956	01/14/2021	VulD...	sectracker	1039127	cve.mitre.org	01/14/2021	accepted	70
10819955	01/14/2021	VulD...	cve_nvd_summary	A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.	cve.mitre.org	01/14/2021	accepted	70
7135481	11/19/2019	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	11/19/2019	accepted	100
7135480	11/19/2019	VulD...	securityfocus_date	1502323200 (08/10/2017)	securityfocus.com	11/19/2019	accepted	100
7135476	11/19/2019	VulD...	cve_assigned	1498003200	mitre.org	11/19/2019	accepted	100
7135469	11/19/2019	VulD...	confirm_url	https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2017-08-11-933099891.html	confluence.atlassian.com	11/19/2019	accepted	100
7135427	11/19/2019	VulD...	discoverydate	1502409600		11/19/2019	accepted	100
7135503	09/25/2017	VulD...	cvss3_nvd_basescore	9.8	nist.gov	09/25/2017	accepted	90
7135502	09/25/2017	VulD...	cvss3_vuldb_rc	C		09/25/2017	accepted	90
7135501	09/25/2017	VulD...	cvss3_vuldb_rl	O		09/25/2017	accepted	90
7135500	09/25/2017	VulD...	cvss3_vuldb_e	X		09/25/2017	accepted	90
7135499	09/25/2017	VulD...	cvss2_vuldb_rc	C		09/25/2017	accepted	90
7135498	09/25/2017	VulD...	cvss2_vuldb_rl	OF		09/25/2017	accepted	90
7135497	09/25/2017	VulD...	cvss2_vuldb_e	ND		09/25/2017	accepted	90
7135496	09/25/2017	VulD...	seealso	93874 105248 107068 107069 107070 107071 107072 107067		09/25/2017	accepted	100
7135495	09/25/2017	VulD...	qualys_title	Ubuntu Security Notification for Subversion Vulnerabilities (USN-3388-1)	qualys.com	09/25/2017	accepted	100
7135494	09/25/2017	VulD...	qualys_id	196880	qualys.com	09/25/2017	accepted	100
7135493	09/25/2017	VulD...	openvas_family	Debian Local Security Checks		09/25/2017	accepted	100