Test ID:	1.3.6.1.4.1.25623.1.0.805607
Category:	Denial of Service
Title:	Apache Subversion 1.8.x DoS Vulnerability (May 2015)
Summary:	Apache Subversion is prone to a denial of service (DoS); vulnerability.
Description:	Summary: Apache Subversion is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to vulnerability in mod_dav_svn that is triggered during the handling of certain REPORT requests, which can cause elements to be repeatedly allocated from a memory pool without being properly deallocated. Vulnerability Impact: Successful exploitation will allow a remote attacker to use multiple concurrent REPORT requests to exhaust all available memory on the system. Affected Software/OS: Subversion version 1.8.0 through 1.8.11. Solution: Update to version 1.8.13 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0202 BugTraq ID: 76446 http://www.securityfocus.com/bid/76446 https://security.gentoo.org/glsa/201610-05 http://www.mandriva.com/security/advisories?name=MDVSA-2015:192 http://www.securitytracker.com/id/1032100 SuSE Security Announcement: openSUSE-SU-2015:0672 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html http://www.ubuntu.com/usn/USN-2721-1
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.