#21097 – CVE-2009-2411: subversion heap overflow

Bug 21097 - CVE-2009-2411: subversion heap overflow

Summary: CVE-2009-2411: subversion heap overflow

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	subversion (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 blocker
Assignee:	Andrey Cherepanov
QA Contact:	qa-sisyphus

URL:	http://subversion.tigris.org/security...
Keywords:	security

Depends on:
Blocks:

Reported:	2009-08-17 17:46 MSD by Dmitry V. Levin
Modified:	2009-08-20 14:24 MSD (History)
CC List:	4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Dmitry V. Levin 2009-08-17 17:46:08 MSD

Subversion performs insufficient input validation of svndiff streams.
Malicious servers could cause heap overflows in clients, and malicious
clients with commit access could cause heap overflows in servers,
possibly leading to arbitrary code execution in both cases.

Upstream released new version to fix the problem.

Comment 1

Repository Robot 2009-08-19 04:25:48 MSD

subversion-1.6.4-alt1 -> sisyphus:

* Tue Aug 18 2009 Dmitry V. Levin <ldv@altlinux> 1.6.4-alt1

- Updated to 1.6.4 (CVE-2009-2411; closes: #21097).

Comment 2

Afanasov Dmitry 2009-08-20 14:24:23 MSD

спасибо, меня резко в командировку выгнали, только до почты добрался.