CVE-2013-4246

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/101620Third Party Advisory, VDB Entry
https://subversion.apache.org/security/CVE-2013-4246-advisory.txtIssue Tracking, Patch, Vendor Advisory
http://www.securityfocus.com/bid/101620Third Party Advisory, VDB Entry
https://subversion.apache.org/security/CVE-2013-4246-advisory.txtIssue Tracking, Patch, Vendor Advisory

Timeline

Published: Oct 30, 2017
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-42477.8Off-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cau CVE-2013-42484.3The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\CVE-2013-42494.3Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.CVE-2013-42506.5The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check CVE-2013-42517.8The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.CVE-2013-42537.5The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in CVE-2013-42546.9The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain CVE-2013-42553.5The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) C CVE-2013-42564.6Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a denial of service (cra CVE-2013-42587.5Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows remote attackers to cau CVE-2013-42591.9runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a syml CVE-2013-42603.3lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite