CVE-2016-2168 in Subversion

Summary

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 01/29/2016
• Disclosure: 05/05/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-83077
• CPE: ready
• CWE: CWE-476 (Confirmed)
• CVSS: 6.7
• EPSS: 0.07364
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2168
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2168
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2168/