CVE-2022-24070

Katalog CVE

CVSS 7.5 · High EPSS 9,5%

Kerentanan Use After Free pada apache subversion, debian linux +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

Rincian

Terbit di NVD

12 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

9,5% peluang dieksploitasi; lebih tinggi dari 95,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bz.apache.org/bugzilla/show_bug.cgi?id=65861 issue tracking · advisory vendor
• https://cwiki.apache.org/confluence/display/HTTPD/ModuleLife advisory vendor
• https://issues.apache.org/jira/browse/SVN-4880 issue tracking · advisory vendor
• http://seclists.org/fulldisclosure/2022/Jul/18 mailing list · advisory pihak ketiga
• https://support.apple.com/kb/HT213345 advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5119 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZ4ARNGLMGYBK...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJPMCWCGWBN3Q...