CVE-2015-5343

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

• CWE-119

• http://subversion.apache.org/security/CVE-2015-5343-advisory.txtVendor Advisory
• http://www.debian.org/security/2015/dsa-3424Third Party Advisory
• http://www.securitytracker.com/id/1034470Third Party Advisory, VDB Entry
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.405261Third Party Advisory
• http://subversion.apache.org/security/CVE-2015-5343-advisory.txtVendor Advisory
• http://www.debian.org/security/2015/dsa-3424Third Party Advisory
• http://www.securitytracker.com/id/1034470Third Party Advisory, VDB Entry
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.405261Third Party Advisory

Published

Apr 14, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5337Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8…
• CVE-2015-5338Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-5339The core_enrol_get_enrolled_users web service in enrol/exter…
• CVE-2015-5340Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8…
• CVE-2015-5341mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8…
• CVE-2015-5342The choice module in Moodle through 2.6.11, 2.7.x before 2.7…
• CVE-2015-5344The camel-xstream component in Apache Camel before 2.15.5 an…
• CVE-2015-5345The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x…
• CVE-2015-5346Session fixation vulnerability in Apache Tomcat 7.x before 7…
• CVE-2015-5347Cross-site scripting (XSS) vulnerability in the getWindowOpe…
• CVE-2015-5348Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and…
• CVE-2015-5349The CSV export in Apache LDAP Studio and Apache Directory St…