| Package | Affected versions | Patched versions |
|---|---|---|
| cvs | = 1.10.7= 1.10.8= 1.11= 1.11.1= 1.11.1p1= 1.11.2= 1.11.3= 1.11.4 |
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free