https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:21:50 +0000 https://cve.radiocsirt.org/vuln/cve-2016-8734 <p><strong>Affected:</strong> Apache Software Foundation Apache Subversion</p> <p>Apache Subversion&#39;s mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Subversion</p> <p>Apache Subversion&#39;s mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.</p> https://cve.radiocsirt.org/vuln/cve-2016-8734 https://cve.radiocsirt.org/vuln/usn-3388-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: subversion, Ubuntu:16.04:LTS: subversion</p> <p>Joern Schneeweisz discovered that Subversion did not properly handle host names in &#39;svn+ssh://&#39; URLs. A remote attacker could use this to construct a subversion repository that when accessed could run arbitrary code with the privileges of the user. (CVE-2017-9800)</p> <p>Daniel Shahaf and James McCoy discovered that Subversion did not properly verify realms when using Cyrus SASL authentication. A remote attacker could use this to possibly bypass intended access restrictions. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2167)</p> <p>Florian Weimer discovered that Subversion clients did not properly restrict XML entity expansion when accessing http(s):// URLs. A remote attacker could use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8734)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: subversion, Ubuntu:16.04:LTS: subversion</p> <p>Joern Schneeweisz discovered that Subversion did not properly handle host names in &#39;svn+ssh://&#39; URLs. A remote attacker could use this to construct a subversion repository that when accessed could run arbitrary code with the privileges of the user. (CVE-2017-9800)</p> <p>Daniel Shahaf and James McCoy discovered that Subversion did not properly verify realms when using Cyrus SASL authentication. A remote attacker could use this to possibly bypass intended access restrictions. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2167)</p> <p>Florian Weimer discovered that Subversion clients did not properly restrict XML entity expansion when accessing http(s):// URLs. A remote attacker could use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8734)</p> https://cve.radiocsirt.org/vuln/usn-3388-1