CVE-2018-11782 log

Severity Medium
Remote Yes
Type Denial of service
Subversion svn:// connections, including svn+ssh:// and svn+<custom>://, use a custom network protocol [1] with Lisp-like syntax. The code implementing the protocol has dedicated codepaths for serialization of revision numbers into protocol integers.  A particular client query could cause the server to attempt to reply with a revision number whose value is the invalid revision number constant `SVN_INVALID_REVNUM`, thereby triggering an assertion failure in the the serialization layer.
Group Package Affected Fixed Severity Status Ticket
AVG-1016 subversion 1.12.0-3 1.12.2-1 High Fixed
Date Advisory Group Package Severity Type
16 Aug 2019 ASA-201908-10 AVG-1016 subversion High denial of service