The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Aug 30, 2017 | May 2, 2013 |
| Centos_linux | — | Upgrade subversion-perlUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-javahlUpgrade subversion-rubyUpgrade subversionUpgrade subversion-svn2clUpgrade subversion-kde | Dec 1, 2016 | May 2, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | May 2, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | Apr 5, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | May 2, 2013 |
| Oracle_linux | — | Upgrade subversion-javahlUpgrade subversion-kdeUpgrade subversion-develUpgrade subversion-gnomeUpgrade subversion-svn2clUpgrade subversionUpgrade subversion-perlUpgrade mod_dav_svnUpgrade subversion-ruby | Oct 16, 2024 | May 2, 2013 |
| Suse | — | Upgrade subversion-server-debuginfoUpgrade libsvn_auth_gnome_keyring-1-0Upgrade sle-sdk-releaseUpgrade subversion-debuginfoUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-toolsUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-pythonUpgrade subversion-ruby-debuginfoUpgrade subversion-perl-debuginfoUpgrade libsvn_auth_kwallet-1-0-debuginfoUpgrade subversion-bash-completionUpgrade libsvn_auth_gnome_keyring-1-0-debuginfoUpgrade subversion-debugsourceUpgrade subversionUpgrade subversion-rubyUpgrade subversion-tools-debuginfoUpgrade subversion-python-debuginfoUpgrade subversion-server | Dec 12, 2013 | May 2, 2013 |
| Ubuntu | — | Upgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | May 2, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub