usn-3388-1
Vulnerability from osv_ubuntu
Published
2017-08-11 06:19
Modified
2026-04-22 07:36
Summary
subversion vulnerabilities
Details

Joern Schneeweisz discovered that Subversion did not properly handle host names in 'svn+ssh://' URLs. A remote attacker could use this to construct a subversion repository that when accessed could run arbitrary code with the privileges of the user. (CVE-2017-9800)

Daniel Shahaf and James McCoy discovered that Subversion did not properly verify realms when using Cyrus SASL authentication. A remote attacker could use this to possibly bypass intended access restrictions. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2167)

Florian Weimer discovered that Subversion clients did not properly restrict XML entity expansion when accessing http(s):// URLs. A remote attacker could use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8734)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2016-2167",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-8734",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-9800",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libapache2-mod-svn",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "libapache2-svn",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "libsvn-java",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "libsvn-perl",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "libsvn-ruby1.8",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "libsvn1",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "python-subversion",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "ruby-svn",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "subversion",
            "binary_version": "1.8.8-1ubuntu3.3"
          },
          {
            "binary_name": "subversion-tools",
            "binary_version": "1.8.8-1ubuntu3.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "subversion",
        "purl": "pkg:deb/ubuntu/subversion@1.8.8-1ubuntu3.3?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.8-1ubuntu3.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.7.9-1+nmu6ubuntu3",
        "1.7.13-2ubuntu1",
        "1.7.13-2ubuntu2",
        "1.7.13-2ubuntu3",
        "1.7.14-1ubuntu2",
        "1.8.5-2ubuntu3",
        "1.8.8-1ubuntu2",
        "1.8.8-1ubuntu3",
        "1.8.8-1ubuntu3.1",
        "1.8.8-1ubuntu3.2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2016-2167",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-8734",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-9800",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libapache2-mod-svn",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "libapache2-svn",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "libsvn-java",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "libsvn-perl",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "libsvn-ruby1.8",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "libsvn1",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "python-subversion",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "ruby-svn",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "subversion",
            "binary_version": "1.9.3-2ubuntu1.1"
          },
          {
            "binary_name": "subversion-tools",
            "binary_version": "1.9.3-2ubuntu1.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "subversion",
        "purl": "pkg:deb/ubuntu/subversion@1.9.3-2ubuntu1.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.3-2ubuntu1.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.8.13-1ubuntu3",
        "1.9.2-3ubuntu1",
        "1.9.2-3ubuntu2",
        "1.9.3-1ubuntu1",
        "1.9.3-2ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "Joern Schneeweisz discovered that Subversion did not properly handle\nhost names in \u0027svn+ssh://\u0027 URLs. A remote attacker could use this\nto construct a subversion repository that when accessed could run\narbitrary code with the privileges of the user. (CVE-2017-9800)\n\nDaniel Shahaf and James McCoy discovered that Subversion did not\nproperly verify realms when using Cyrus SASL authentication. A\nremote attacker could use this to possibly bypass intended access\nrestrictions. This issue only affected Ubuntu 14.04 LTS and Ubuntu\n16.04 LTS. (CVE-2016-2167)\n\nFlorian Weimer discovered that Subversion clients did not properly\nrestrict XML entity expansion when accessing http(s):// URLs. A remote\nattacker could use this to cause a denial of service. This issue only\naffected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8734)\n",
  "id": "USN-3388-1",
  "modified": "2026-04-22T07:36:34Z",
  "published": "2017-08-11T06:19:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3388-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-2167"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-8734"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-9800"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "subversion vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2016-2167",
    "UBUNTU-CVE-2016-8734",
    "UBUNTU-CVE-2017-9800"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.