CVE-2016-8734 in Subversion
Summary
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
10/18/2016
Disclosure
10/16/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93874 | Apache Subversion mod_dontdothat resource consumption | 400 | Not defined | Official fix | CVE-2016-8734 |