USN-3388-1

Dashboard / Vulnerabilities / USN-3388-1

USN-3388-1

Summary: subversion vulnerabilities

Details: Joern Schneeweisz discovered that Subversion did not properly handle host names in 'svn+ssh://' URLs. A remote attacker could use this to construct a subversion repository that when accessed could run arbitrary code with the privileges of the user. (CVE-2017-9800) Daniel Shahaf and James McCoy discovered that Subversion did not properly verify realms when using Cyrus SASL authentication. A remote attacker could use this to possibly bypass intended access restrictions. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2167) Florian Weimer discovered that Subversion clients did not properly restrict XML entity expansion when accessing http(s):// URLs. A remote attacker could use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8734)

References: https://ubuntu.com/security/notices/USN-3388-1, https://ubuntu.com/security/CVE-2016-2167, https://ubuntu.com/security/CVE-2016-8734, https://ubuntu.com/security/CVE-2017-9800