CVE-2018-11803 Null dereference in Apache Subversion
An attacker can cause a denial of service by triggering a crash in the Apache Subversion mod_dav_svn module via a malformed recursive directory listing request.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-11803?
CVE-2018-11803 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 5 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation.
Weakness: CWE-824
Which versions are affected by CVE-2018-11803?
It affects 2 products.
Linux distribution packages (4)
subversion SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 1.10.0-3.3.1 |
subversion SUSE:Linux Enterprise Module for Development Tools 15 | All versions | 1.10.0-3.3.1 |
subversion SUSE:Linux Enterprise Module for Server Applications 15 | All versions | 1.10.0-3.3.1 |
subversion openSUSE:Leap 15.0 | All versions | 1.10.0-lp150.2.3.1 |
Products include Apache Subversion, Canonical Ubuntu Linux.
How do I fix CVE-2018-11803?
Apply the vendor's patch.
Is CVE-2018-11803 being exploited?
There is no known exploitation of CVE-2018-11803 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
- CVE-2017-9800 A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha
- CVE-2013-4246 Denial of service in n/a
- CVE-2015-5259 Integer overflow in n/a
- CVE-2024-45720 Apache Subversion: Command line argument injection on Windows platforms
- CVE-2015-0202 Denial of service in n/a
Sources
Also known as ALPINE-CVE-2018-11803, DEBIAN-CVE-2018-11803, GHSA-q2m4-jgq9-q8vh, SUSE-SU-2019:0195-1, openSUSE-SU-2019:0153-1.