Heap-based Buffer Overflow in Apache Subversion 1.9.x

CVE-2015-5259 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:C

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

Learn more about our Cis Benchmark Audit For Apache Http Server.