CVE-2016-8734 in Subversion

Zusammenfassung

von MITRE

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservieren: 18.10.2016
• Veröffentlichung: 16.10.2017
• Moderieren: akzeptiert
• Eintrag: VDB-93874
• CPE: bereit
• CWE: CWE-400 (bestätigt)
• CVSS: 6.5 (NVD)
• EPSS: 0.12879
• KEV: nein
• Aktivitäten: very low
• Sektor: Hostingprovider

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8734
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8734
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8734/