CVE-2016-8734 in Subversion

Sumário (Inglês)

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

18/10/2016

Divulgação

16/10/2017

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
93874	Apache Subversion mod_dontdothat Negação de Serviço	400	Não definido	Correção oficial	CVE-2016-8734

Fontes

• MITRE
• NVD
• CVE Details