What is RHSA-2015:0166?

RHSA-2015:0166 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: subversion security update

Which CVE IDs does RHSA-2015:0166 cover?

RHSA-2015:0166 covers the following CVE IDs: CVE-2014-3528, CVE-2014-3580, CVE-2014-8108. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

RHSA-2015:0166Medium

Red Hat Security Advisory: subversion security update

Vendor

Red Hat Product Security

Published

February 10, 2015

Last Modified

June 27, 2026

🔗 CVE IDs covered (3)

CVE-2014-3528 →CVE-2014-3580 →CVE-2014-8108 →

📋 Description

CVE-2014-3528 — subversion: credentials leak via MD5 collision CVE-2014-3580 — subversion: NULL pointer dereference flaw in mod_dav_svn when handling REPORT requests CVE-2014-8108 — subversion: NULL pointer dereference flaw in mod_dav_svn when handling URIs for virtual transaction names

🔗 References (9)

selfhttps://access.redhat.com/errata/RHSA-2015:0166
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://subversion.apache.org/security/CVE-2014-3528-advisory.txt
externalhttps://subversion.apache.org/security/CVE-2014-3580-advisory.txt
externalhttps://subversion.apache.org/security/CVE-2014-8108-advisory.txt
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1125799
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1174054
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1174057
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0166.json