CVE-2013-4131

Name	CVE-2013-4131
Description	The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	717794

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
subversion (PTS)	bullseye (security), bullseye	1.14.1-3+deb11u1	fixed
	bookworm	1.14.2-4	fixed
	sid, trixie	1.14.4-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
subversion	source	squeeze	(not affected)
subversion	source	wheezy	(not affected)
subversion	source	(unstable)	1.7.13-1	717794

[squeeze] - subversion <not-affected> (Only affects >= 1.7)
[wheezy] - subversion <not-affected> (Only affects >= 1.7)