Reachable Assertion in Subversion - CVE-2018-11782

Vulnerability identifier: #VU19589

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-11782

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion when handling svnserve 'get-deleted-rev' requests. A remote authenticated attacker with read-only permissions can make the server to reply with incorrect revision number that will lead to svnserve crash.

Subversion
ProSafe-RS
CENTUM VP Entry Class
CENTUM VP
B/M9000 VP
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Opensuse
Ubuntu
Fedora
subversion (Red Hat package)
subversion (Debian package)
subversion (Alpine package)
subversion (Ubuntu package)
libsvn1 (Ubuntu package)
libapache2-mod-svn (Ubuntu package)
subversion
IBM QRadar Network Security
cflinuxfs3
Isolation Segment
VMware Tanzu Application Service for VMs

Install updates from vendor's website.

Subversion - addressed in versions 1.9.12, 1.10.6, 1.12.2
ProSafe-RS - update to R4.06.00
CENTUM VP Entry Class - update to R6.08.00
CENTUM VP - update to R6.08.00
subversion (Red Hat package) - update to 1.7.14-16.el7
subversion (Debian package) - addressed in versions 1.9.5-1+deb9u4, 1.10.4-1+deb10u1
subversion (Alpine package) - update to 1.9.12-r0
subversion (Ubuntu package) - addressed in versions 1.9.3-2ubuntu1.3, 1.9.7-4ubuntu1.1, 1.13.0-3ubuntu0.2
IBM QRadar Network Security - addressed in versions 5.4.0.13, 5.5.0.8
cflinuxfs3 - update to 0.300.0
libsvn1 (Ubuntu package) - addressed in versions 1.9.7-4ubuntu1.1, 1.13.0-3ubuntu0.2
libapache2-mod-svn (Ubuntu package) - addressed in versions 1.9.7-4ubuntu1.1, 1.13.0-3ubuntu0.2
subversion - update to 1.12.2-1.fc30
Isolation Segment - addressed in versions 2.7.45, 2.10.25, 2.11.14, 2.12.10
VMware Tanzu Application Service for VMs - addressed in versions 2.7.50, 2.10.32, 2.11.20, 2.12.15, 2.13.5

• https://subversion.apache.org/security/CVE-2018-11782-advisory.txt

• Remote DoS in Apache Subversion
• Ubuntu update for Subversion
• Debian update for subversion
• OpenSUSE Linux update for subversion
• Arch Linux update for subversion
• Amazon Linux AMI update for subversion
• Reachable Assertion in subversion (Alpine package)
• Red Hat Enterprise Linux 7 update for subversion
• Red Hat Enterprise Linux 8 update for the subversion:1.10 module
• Multiple vulnerabilities in Yokogawa CENTUM, ProSafe-RS and B/M9000 VP
• Ubuntu update for subversion
• Multiple vulnerabilities in Cloud Foundry Foundation cflinuxfs3
• Multiple vulnerabilities in IBM QRadar Network Security
• VMware Tanzu products update for Subversion
• Fedora 30 update for subversion