CVE-2010-4644

Description

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.

How to fix CVE-2010-4644

To remediate CVE-2010-4644, upgrade the affected package to a fixed version below.

• Debian/subversion—upgrade to 1.6.12dfsg-3 or later

Is CVE-2010-4644 being exploited?

Low — EPSS is 4.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.6.12dfsg-3

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-4644