SUSE-SU-2022:1161-1: subversion&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2022:1161-1 is a vulnerability in subversion&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 12-04-2022PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for subversion This update for subversion fixes the following issues: - CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache HTTP server. This could be exploited by a remote attacker to cause a denegation of service (bsc#1197940). - CVE-2021-28544: Fixed an information leak issue where Subversion servers may reveal the original path of files protected by path-based authorization (bsc#1197939).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse20 products
- subversion&distro=SUSE Enterprise Storage 6< 1.10.6-150000.3.21.1
- subversion&distro=SUSE Enterprise Storage 7< 1.10.6-150000.3.21.1
- subversion&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.10.6-150000.3.21.1
- subversion&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.10.6-150000.3.21.1
- subversion&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS< 1.10.6-150000.3.21.1
1 vendor · 20 products