CVE-2004-1343: Cvs

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).

Affected products

• Cvs Cvs: version 1.10 only; version 1.10.6 only; version 1.10.7 only; version 1.10.8 only; version 1.11 only; version 1.11.1 only; …

Published 2004-12-31. Last modified 2026-06-16.