Unscored DSA-519 3 CVEs

cvs - several vulnerabilities

Published Jun 15, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	cvs	1.11.1p1debian-9woody7

Vulnerabilities 3

Unscored —

CVE-2004-0416 Public exploit EPSS 13%

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may …

cvs Debian

Jun 11, 2004
Unscored —

CVE-2004-0417

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x …

cvs Debian

Jun 11, 2004
Unscored —

CVE-2004-0418

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which…

cvs Debian

Jun 11, 2004