CVEvulnerability
CVE-2009-2411
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.
Affected configurations
• subversion subversion (<= 1.5.6)
• subversion subversion 0.22.1
• subversion subversion 0.23.0
• subversion subversion 0.24.0
• subversion subversion 0.24.1
• subversion subversion 0.24.2
• subversion subversion 0.25.0
• subversion subversion 0.27.0
• subversion subversion 0.28.0
• subversion subversion 0.28.1
• subversion subversion 0.28.2
• subversion subversion 0.29.0
• subversion subversion 0.30.0
• subversion subversion 0.31.0
• subversion subversion 0.32.0
• subversion subversion 0.32.1
• subversion subversion 0.33.0
• subversion subversion 0.33.1
• subversion subversion 0.34.0
• subversion subversion 0.35.0
• subversion subversion 0.35.1
• subversion subversion 0.36.0
• subversion subversion 0.37.0
• subversion subversion 1.0
• subversion subversion 1.0.0
• subversion subversion 1.0.1
• subversion subversion 1.0.2
• subversion subversion 1.0.3
• subversion subversion 1.0.4
• subversion subversion 1.0.5
• subversion subversion 1.0.6
• subversion subversion 1.0.7
• subversion subversion 1.0.8
• subversion subversion 1.0.9
• subversion subversion 1.1.0
• subversion subversion 1.1.0 rc1
• subversion subversion 1.1.0 rc2
• subversion subversion 1.1.0 rc3
• subversion subversion 1.1.1
• subversion subversion 1.1.2
• subversion subversion 1.1.3
• subversion subversion 1.1.4
• subversion subversion 1.2.0
• subversion subversion 1.2.1
• subversion subversion 1.2.2
• subversion subversion 1.2.3
• subversion subversion 1.3.0
• subversion subversion 1.3.1
• subversion subversion 1.3.2
• subversion subversion 1.4.0
• subversion subversion 1.4.1
• subversion subversion 1.4.2
• subversion subversion 1.4.3
• subversion subversion 1.4.4
• subversion subversion 1.4.5
• subversion subversion 1.5.0
• subversion subversion 1.5.1
• subversion subversion 1.5.3
• subversion subversion 1.5.4
• subversion subversion 1.5.5
… and 4 more
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html archives.neohapsis.com
- http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html lists.apple.com
- http://osvdb.org/56856 osvdb.org
- http://secunia.com/advisories/36184 Vendor Advisory
- http://secunia.com/advisories/36224 secunia.com
- http://secunia.com/advisories/36232 secunia.com
- http://secunia.com/advisories/36257 secunia.com
- http://secunia.com/advisories/36262 secunia.com
- http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt subversion.tigris.org
- http://support.apple.com/kb/HT3937 support.apple.com
- http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES svn.collab.net
- http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES svn.collab.net
- http://svn.haxx.se/dev/archive-2009-08/0107.shtml svn.haxx.se
- http://svn.haxx.se/dev/archive-2009-08/0108.shtml svn.haxx.se
- http://svn.haxx.se/dev/archive-2009-08/0110.shtml svn.haxx.se
- http://www.debian.org/security/2009/dsa-1855 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:199 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2009-1203.html www.redhat.com
- http://www.securityfocus.com/bid/35983 www.securityfocus.com
- http://www.securitytracker.com/id?1022697 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-812-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/2180 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3184 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html www.redhat.com
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html archives.neohapsis.com
- http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html lists.apple.com
- http://osvdb.org/56856 osvdb.org
- http://secunia.com/advisories/36184 Vendor Advisory
- http://secunia.com/advisories/36224 secunia.com
- http://secunia.com/advisories/36232 secunia.com
- http://secunia.com/advisories/36257 secunia.com
- http://secunia.com/advisories/36262 secunia.com
- http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt subversion.tigris.org
- http://support.apple.com/kb/HT3937 support.apple.com
- http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES svn.collab.net
- http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES svn.collab.net
- http://svn.haxx.se/dev/archive-2009-08/0107.shtml svn.haxx.se
- http://svn.haxx.se/dev/archive-2009-08/0108.shtml svn.haxx.se
- http://svn.haxx.se/dev/archive-2009-08/0110.shtml svn.haxx.se
- http://www.debian.org/security/2009/dsa-1855 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:199 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2009-1203.html www.redhat.com
- http://www.securityfocus.com/bid/35983 www.securityfocus.com
- http://www.securitytracker.com/id?1022697 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-812-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/2180 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3184 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html www.redhat.com