Subversion - Denial-of-Service and Arbitrary Command Execution
Summary
DSA-3932-1: subversion - security update. Affects subversion versions < 1.8.10-6+deb8u5. Fixed in 1.8.10-6+deb8u5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Subversion is a centralized version control system used for managing and tracking changes to files and directories. It allows multiple users to collaborate on a project and keeps a history of all changes made. Subversion supports various protocols, including HTTP(S) and SSH, for accessing repositories. However, two vulnerabilities have been discovered in Subversion that can lead to a denial-of-service attack and arbitrary command execution.
Vulnerability Detail
The first vulnerability, identified as CVE-2016-8734, affects Subversion's mod_dontdothat server module and Subversion clients using HTTP(S). It is caused by exponential XML entity expansion, which can be exploited to launch a denial-of-service attack.
The second vulnerability, known as CVE-2017-9800, arises from Subversion's incorrect handling of maliciously constructed svn+ssh:// URLs. This flaw allows an attacker to execute arbitrary shell commands, potentially leading to unauthorized access or data manipulation. The vulnerability can be exploited through svn:externals properties or when using svnsync sync.
How To Fix
Minimum fixed version
1.8.10-6+deb8u5
This is the first release that contains the fix.
sudo apt-get install --only-upgrade subversionTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Subversion is prone to two vulnerabilities that can lead to a denial-of-service attack and arbitrary command execution. It is crucial to upgrade your Subversion packages to the recommended versions to mitigate these risks. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for subversion →
FAQ
Subversion is a centralized version control system used for managing and tracking changes to files and directories in a collaborative environment.
CVE-2016-8734 is a vulnerability in Subversion that allows a denial-of-service attack through exponential XML entity expansion.
CVE-2017-9800 is a vulnerability in Subversion that enables arbitrary command execution through maliciously constructed svn+ssh:// URLs.
The first vulnerability can be exploited by sending specially crafted requests to Subversion's mod_dontdothat server module or Subversion clients using HTTP(S). The second vulnerability can be exploited by manipulating svn:externals properties or when using svnsync sync.
To fix these vulnerabilities, upgrade your Subversion packages to the recommended versions: 1.8.10-6+deb8u5 for the oldstable distribution (jessie) and 1.9.5-1+deb9u1 for the stable distribution (stretch).
Related vulnerabilities
Recent vulnerabilities recorded for subversion.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
