Vulnerability in Cvs
CVE-2004-1343
CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).
EPSS: 0.019 (77.9th percentile) — read the EPSS interpretation.
Affected products
- Cvs — versions 1.10, 1.10.6, 1.10.7
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)