Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2022-0140
HistoryApr 13, 2022 - 7:06 p.m.

Updated subversion packages fix security vulnerability

2022-04-1319:06:19
Gentoo Foundation
advisories.mageia.org
32
subversion
memory corruption
security vulnerability
unix

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

68.6%

JSON

SVN authz protected copyfrom paths regression. (CVE-2021-28544) Subversion’s mod_dav_svn is vulnerable to memory corruption. (CVE-2022-24070)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchsubversion< 1.14.2-1subversion-1.14.2-1.mga8

Related

openvas 15
suse 1
nessus 41
osv 11
ubuntu 2
photon 4
debian 1
freebsd 1
fedora 2
prion 2
ibm 2
cvelist 2
redhatcve 2
nvd 2
cve 2
alpinelinux 2
cbl_mariner 4
debiancve 2
veracode 2
ubuntucve 2
rocky 3
redhat 7
oraclelinux 3
almalinux 1
rosalinux 1
apple 1
openvas
openvas
Ubuntu: Security Advisory (USN-5372-1)
2022-04-13 00:00:00
Fedora: Security Advisory for subversion (FEDORA-2022-13cc09ecf2)
2022-07-16 00:00:00
Debian: Security Advisory (DSA-5119-1)
2022-04-14 00:00:00
suse
suse
Security update for subversion (important)
2022-04-12 00:00:00
nessus
nessus
EulerOS 2.0 SP10 : subversion (EulerOS-SA-2022-2172)
2022-07-29 00:00:00
Ubuntu 22.04 LTS : Subversion vulnerabilities (USN-5450-1)
2022-05-27 00:00:00
SUSE SLED15 / SLES15 Security Update : subversion (SUSE-SU-2022:1162-1)
2022-04-13 00:00:00
osv
osv
subversion vulnerabilities
2022-05-27 01:00:42
subversion vulnerabilities
2022-04-12 17:08:51
subversion - security update
2022-04-13 00:00:00
ubuntu
ubuntu
Subversion vulnerabilities
2022-05-27 00:00:00
Subversion vulnerabilities
2022-04-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0389
2022-05-03 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0389
2022-05-03 00:00:00
Critical Photon OS Security Update - PHSA-2022-0189
2022-05-27 00:00:00
debian
debian
[SECURITY] [DSA 5119-1] subversion security update
2022-04-13 04:21:54
freebsd
freebsd
Subversion -- Multiple vulnerabilities in server code
2022-04-12 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: subversion-1.14.2-5.fc36
2022-07-15 01:17:37
[SECURITY] Fedora 35 Update: subversion-1.14.2-5.fc35
2022-07-15 01:36:38
prion
prion
Path traversal
2022-04-12 18:15:00
Memory corruption
2022-04-12 18:15:00
ibm
ibm
Security Bulletin: A security vulnerability has been identified in Apache Subversion shipped with IBM Tivoli Netcool Impact (CVE-2021-28544)
2022-07-06 05:35:34
Security Bulletin: A security vulnerability has been identified in Apache Subversion shipped with IBM Tivoli Netcool Impact (CVE-2022-24070)
2022-07-06 05:20:54
cvelist
cvelist
CVE-2021-28544 Apache Subversion SVN authz protected copyfrom paths regression
2022-04-12 17:50:13
CVE-2022-24070 Apache Subversion mod_dav_svn is vulnerable to memory corruption
2022-04-12 17:50:14
redhatcve
redhatcve
CVE-2021-28544
2022-04-13 05:22:18
CVE-2022-24070
2022-04-13 05:37:22
nvd
nvd
CVE-2021-28544
2022-04-12 18:15:08
CVE-2022-24070
2022-04-12 18:15:09
cve
cve
CVE-2021-28544
2022-04-12 18:15:08
CVE-2022-24070
2022-04-12 18:15:09
alpinelinux
alpinelinux
CVE-2021-28544
2022-04-12 18:15:08
CVE-2022-24070
2022-04-12 18:15:09
cbl_mariner
cbl_mariner
CVE-2021-28544 affecting package subversion 1.14.0-4
2022-05-12 02:16:39
CVE-2021-28544 affecting package subversion for versions less than 1.14.2-1
2022-06-26 03:29:34
CVE-2022-24070 affecting package subversion 1.14.0-4
2022-05-12 02:16:39
debiancve
debiancve
CVE-2021-28544
2022-04-12 18:15:08
CVE-2022-24070
2022-04-12 18:15:09
veracode
veracode
Information Disclosure
2022-04-13 15:52:02
Denial Of Service (DoS)
2022-04-13 14:34:49
ubuntucve
ubuntucve
CVE-2021-28544
2021-04-12 00:00:00
CVE-2022-24070
2021-04-12 00:00:00
rocky
rocky
subversion:1.10 security update
2022-05-12 13:15:51
subversion:1.14 security update
2022-06-08 08:20:16
subversion security update
2022-05-18 00:11:20
redhat
redhat
(RHSA-2022:2222) Important: subversion:1.10 security update
2022-05-11 20:49:09
(RHSA-2022:2237) Important: subversion:1.10 security update
2022-05-12 13:19:08
(RHSA-2022:4591) Important: subversion security update
2022-05-18 00:11:20
oraclelinux
oraclelinux
subversion:1.14 security update
2022-06-09 00:00:00
subversion security update
2022-06-30 00:00:00
subversion:1.10 security update
2022-05-19 00:00:00
almalinux
almalinux
Important: subversion:1.10 security update
2022-05-12 13:15:51
rosalinux
rosalinux
Advisory ROSA-SA-2023-2216
2023-08-15 09:37:11
apple
apple
About the security content of macOS Monterey 12.5
2022-07-20 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

68.6%

JSON
Related for MGASA-2022-0140
openvas15suse1nessus41osv11ubuntu2photon4debian1freebsd1fedora2prion2ibm2cvelist2redhatcve2nvd2cve2alpinelinux2cbl_mariner4debiancve2veracode2ubuntucve2rocky3redhat7oraclelinux3almalinux1rosalinux1apple1