In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade utf8procUpgrade libserf | May 4, 2022 | Sep 26, 2019 |
| Alpine Linux | — | Upgrade subversion | Nov 8, 2019 | Sep 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade subversion-libsUpgrade subversion-pythonUpgrade subversionUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-toolsUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-rubyUpgrade subversion-javahlUpgrade subversion-debuginfo | Oct 28, 2020 | Sep 26, 2019 |
| Amazon_linux | — | Upgrade subversion | Nov 7, 2019 | Aug 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 26, 2019 |
| Centos_linux | — | Upgrade subversion-libs-debuginfoUpgrade subversion-rubyUpgrade subversion-toolsUpgrade subversion-debuginfoUpgrade subversion-javahlUpgrade subversion-tools-debuginfoUpgrade utf8proc-debugsourceUpgrade mod_dav_svnUpgrade utf8procUpgrade libserf-debuginfoUpgrade subversion-kdeUpgrade subversion-perlUpgrade subversion-develUpgrade utf8proc-debuginfoUpgrade subversion-pythonUpgrade libserf-debugsourceUpgrade mod_dav_svn-debuginfoUpgrade subversion-perl-debuginfoUpgrade subversion-devel-debuginfoUpgrade subversion-gnome-debuginfoUpgrade subversion-libsUpgrade subversionUpgrade subversion-debugsourceUpgrade subversion-gnomeUpgrade libserf | Oct 1, 2020 | Sep 26, 2019 |
| Debian | — | Upgrade subversion | Aug 2, 2019 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade subversion-libsUpgrade subversionUpgrade mod_dav_svn | Feb 22, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mod_dav_svnUpgrade subversionUpgrade subversion-libs | Jan 20, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mod_dav_svnUpgrade subversionUpgrade subversion-libs | Feb 3, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade subversionUpgrade mod_dav_svnUpgrade subversion-libs | Apr 26, 2022 | Sep 26, 2019 |
| Oracle Solaris | — | Upgrade library/python/subversion-27 to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/java/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/subversion-522 to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-522/subversion-64 to version 1.7.5-11.4.0.0.1.3.0 on Solaris 11.4Upgrade developer/versioning/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4 | Oct 16, 2019 | Sep 26, 2019 |
| Oracle_linux | — | Upgrade subversion-libsUpgrade utf8procUpgrade subversion-rubyUpgrade subversion-kdeUpgrade subversion-javahlUpgrade subversionUpgrade libserfUpgrade subversion-develUpgrade subversion-toolsUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversion-perlUpgrade subversion-python | Oct 14, 2020 | Jul 31, 2019 |
| Redhat_linux | — | No solution existsUpgrade subversion-javahlUpgrade subversion-debuginfoUpgrade subversion-debugsourceUpgrade libserf-debugsourceUpgrade libserfUpgrade subversion-pythonUpgrade libserf-debuginfoUpgrade subversion-kdeUpgrade utf8procUpgrade subversion-libs-debuginfoUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-perl-debuginfoUpgrade utf8proc-debugsourceUpgrade subversion-perlUpgrade subversion-tools-debuginfoUpgrade subversion-toolsUpgrade subversion-devel-debuginfoUpgrade subversionUpgrade subversion-develUpgrade subversion-rubyUpgrade mod_dav_svn-debuginfoUpgrade utf8proc-debuginfoUpgrade subversion-libsUpgrade subversion-gnome-debuginfo | Oct 1, 2020 | Sep 26, 2019 |
| Rocky_linux | — | Upgrade utf8proc-debugsourceUpgrade libserfUpgrade utf8procUpgrade libserf-debuginfoUpgrade utf8proc-debuginfoUpgrade libserf-debugsource | Mar 12, 2024 | Sep 26, 2019 |
| Suse | — | Upgrade subversion-python-ctypesUpgrade subversion-pythonUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-toolsUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-serverUpgrade subversionUpgrade subversion-rubyUpgrade subversion-bash-completionUpgrade libsvn_auth_kwallet-1-0 | Aug 1, 2019 | Jul 31, 2019 |
| Ubuntu | — | Upgrade libsvn1Upgrade libapache2-mod-svnUpgrade subversion | Aug 1, 2019 | Aug 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub