CVE-2015-5259 in Apache Subversion
摘要 (英语)
Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.
预定
2015-07-01
披露
2016-01-08
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 80116 | Apache Subversion svn Protocol marshal.c read_string 内存损坏 | 119 | 未定义 | 官方修复 | CVE-2015-5259 |