usn-5445-1

Severity

Medium

Vendor

Canonical Ubuntu

Versions Affected

• Canonical Ubuntu 18.04

Description

Ace Olszowka discovered that Subversion incorrectly handled certain svnserve requests. A remote attacker could possibly use this issue to cause svnserver to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-11782) Tomas Bortoli discovered that Subversion incorrectly handled certain svnserve requests. A remote attacker could possibly use this issue to cause svnserver to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-0203) Thomas Åkesson discovered that Subversion incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-17525) Update Instructions: Run sudo ua fix USN-5445-1 to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libsvn-dev – 1.9.7-4ubuntu1.1 ruby-svn – 1.9.7-4ubuntu1.1 subversion-tools – 1.9.7-4ubuntu1.1 libapache2-mod-svn – 1.9.7-4ubuntu1.1 python-subversion – 1.9.7-4ubuntu1.1 libsvn1 – 1.9.7-4ubuntu1.1 subversion – 1.9.7-4ubuntu1.1 libsvn-doc – 1.9.7-4ubuntu1.1 libsvn-java – 1.9.7-4ubuntu1.1 libsvn-perl – 1.9.7-4ubuntu1.1 No subscription required

CVEs contained in this USN include: CVE-2018-11782, CVE-2019-0203, CVE-2020-17525.

Affected Cloud Foundry Products and Versions

Severity is medium unless otherwise noted.

• cflinuxfs3
  • All versions prior to 0.300.0
• CF Deployment
  • All versions prior to 21.0.0

Mitigation

Users of affected products are strongly encouraged to follow the mitigations below.

The Cloud Foundry project recommends upgrading the following releases:

• cflinuxfs3
  • Upgrade all versions to 0.300.0 or greater
• CF Deployment
  • Upgrade all versions to 21.0.0 or greater

References

• USN Notice
• CVE-2018-11782
• CVE-2019-0203
• CVE-2020-17525

History

2022-07-28: Initial vulnerability report published.