NVD

Id
18441  
Name
CVE-2016-2168  
Description
The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-05-05  
Modified Date
2016-11-30  
Seq
2016-2168  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102442 18441 CVE-2016-2168 FEDORA-2016-20cc04ac50  View
102443 18441 CVE-2016-2168 openSUSE-SU-2016:1263  View
102444 18441 CVE-2016-2168 openSUSE-SU-2016:1264  View
102445 18441 CVE-2016-2168 [subversion-announce] 20160428 [ANNOUNCE][SECURITY] Apache Subversion 1.9.4 released  View
102446 18441 CVE-2016-2168 [subversion-announce] 20160428 [ANNOUNCE][SECURITY] Apache Subversion 1.8.16 released  View
102447 18441 CVE-2016-2168 http://subversion.apache.org/security/CVE-2016-2168-advisory.txt  View
102448 18441 CVE-2016-2168 DSA-3561  View
102449 18441 CVE-2016-2168 89320  View
102450 18441 CVE-2016-2168 1035707  View
102451 18441 CVE-2016-2168 SSA:2016-121-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1698 JVNDB-2016-002471 Apache Subversion の httpd サーバの mod_authz_svn モジュールの req_check_access 関数におけるサービス運用妨害 (DoS) の脆弱性 Apache Subversion の httpd サーバの mod_authz_svn モジュールの req_check_access 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-2168 88674 CVE-2016-2168 18441 4 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002471.html 2016-04-28 2016-05-10 View