CVE-2009-2411

N/A Unknown
Published: August 07, 2009 Modified: April 23, 2026
View on NVD

Description

Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html
Source: secalert@redhat.com
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Source: secalert@redhat.com
http://osvdb.org/56856
Source: secalert@redhat.com
http://secunia.com/advisories/36184
Source: secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/36224
Source: secalert@redhat.com
http://secunia.com/advisories/36232
Source: secalert@redhat.com
http://secunia.com/advisories/36257
Source: secalert@redhat.com
http://secunia.com/advisories/36262
Source: secalert@redhat.com
http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt
Source: secalert@redhat.com
http://support.apple.com/kb/HT3937
Source: secalert@redhat.com
http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES
Source: secalert@redhat.com
http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES
Source: secalert@redhat.com
http://svn.haxx.se/dev/archive-2009-08/0107.shtml
Source: secalert@redhat.com
http://svn.haxx.se/dev/archive-2009-08/0108.shtml
Source: secalert@redhat.com
http://svn.haxx.se/dev/archive-2009-08/0110.shtml
Source: secalert@redhat.com
http://www.debian.org/security/2009/dsa-1855
Source: secalert@redhat.com
http://www.mandriva.com/security/advisories?name=MDVSA-2009:199
Source: secalert@redhat.com
http://www.redhat.com/support/errata/RHSA-2009-1203.html
Source: secalert@redhat.com
http://www.securityfocus.com/bid/35983
Source: secalert@redhat.com
http://www.securitytracker.com/id?1022697
Source: secalert@redhat.com
http://www.ubuntu.com/usn/usn-812-1
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2009/2180
Source: secalert@redhat.com
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3184
Source: secalert@redhat.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465
Source: secalert@redhat.com
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html
Source: secalert@redhat.com
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html
Source: secalert@redhat.com
http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/56856
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/36184
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/36224
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/36232
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/36257
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/36262
Source: af854a3a-2127-422b-91ae-364da2661108
http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.apple.com/kb/HT3937
Source: af854a3a-2127-422b-91ae-364da2661108
http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES
Source: af854a3a-2127-422b-91ae-364da2661108
http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES
Source: af854a3a-2127-422b-91ae-364da2661108
http://svn.haxx.se/dev/archive-2009-08/0107.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
http://svn.haxx.se/dev/archive-2009-08/0108.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
http://svn.haxx.se/dev/archive-2009-08/0110.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2009/dsa-1855
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDVSA-2009:199
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2009-1203.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/35983
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1022697
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/usn-812-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2009/2180
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3184
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html
Source: af854a3a-2127-422b-91ae-364da2661108

52 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
6.2%
91th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-189

Affected Vendors

subversion

Related CVEs

CVE-2026-7073 7.3
CVE-2026-7072 7.3
CVE-2026-7071 5.3
CVE-2026-7070 7.3
CVE-2026-7069 8.0