Subversion - Copyfrom Path Disclosure and Use-After-Free Vulnerability
Summary
DSA-5119-1: subversion - security update. Affects subversion versions < 1.10.4-1+deb10u3. Fixed in 1.10.4-1+deb10u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Subversion is a version control system that allows users to track changes made to files and directories over time. It is commonly used for managing source code and collaborating on software development projects. Subversion servers implement path-based authorization (authz) rules to control access to specific paths within the repository. These rules determine which users can perform certain actions, such as reading or modifying files. However, two vulnerabilities have been discovered in Subversion that can undermine the effectiveness of these authorization rules.
Vulnerability Detail
The first vulnerability, identified as CVE-2021-28544, involves Subversion servers revealing copyfrom paths that should be hidden according to configured path-based authorization rules. This disclosure can potentially expose sensitive information and bypass access restrictions. The second vulnerability, known as CVE-2022-24070, affects Subversion's mod_dav_svn module and is a use-after-free vulnerability. When looking up path-based authorization rules, this vulnerability can lead to a denial of service (crash of the HTTPD worker handling the request). An attacker could exploit this vulnerability to disrupt the availability of the Subversion server.
How To Fix
Minimum fixed version
1.10.4-1+deb10u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade subversionTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Subversion is prone to two vulnerabilities that can lead to unauthorized access and denial of service. To mitigate these risks, it is crucial to upgrade to the fixed versions mentioned in the 'how_to_fix' section. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for subversion →
FAQ
CVE-2021-28544 can allow unauthorized access to copyfrom paths that should be hidden, potentially exposing sensitive information and bypassing path-based authorization rules.
CVE-2022-24070 can be exploited by sending specially crafted requests to the Subversion server, triggering a use-after-free vulnerability and causing a denial of service.
Yes, all versions of Subversion are affected. It is crucial to update to the fixed versions mentioned in the 'how_to_fix' section.
No specific workarounds have been provided. It is recommended to apply the available updates to address the vulnerabilities.
You can refer to the Subversion security tracker page at https://security-tracker.debian.org/tracker/subversion for detailed security status and updates.
Related vulnerabilities
Recent vulnerabilities recorded for subversion.
