The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Aug 30, 2017 | May 2, 2013 |
| Centos_linux | — | Upgrade subversion-kdeUpgrade subversion-javahlUpgrade subversion-rubyUpgrade subversion-perlUpgrade subversion-develUpgrade subversionUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-svn2cl | Dec 1, 2016 | May 2, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | May 2, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | Apr 5, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | May 2, 2013 |
| Oracle Solaris | — | Upgrade developer/versioning/subversion to version 1.7.5-0.175.1.17.0.2.0 on Solaris 11.1 | May 29, 2017 | May 2, 2013 |
| Oracle_linux | — | Upgrade subversionUpgrade subversion-gnomeUpgrade subversion-kdeUpgrade mod_dav_svnUpgrade subversion-perlUpgrade subversion-rubyUpgrade subversion-develUpgrade subversion-svn2clUpgrade subversion-javahl | Oct 16, 2024 | May 2, 2013 |
| Suse | — | Upgrade libsvn_auth_kwallet-1-0-debuginfoUpgrade libsvn_auth_gnome_keyring-1-0Upgrade libsvn_auth_kwallet-1-0Upgrade subversion-develUpgrade subversion-bash-completionUpgrade subversion-perlUpgrade viewcvsUpgrade subversion-perl-debuginfoUpgrade cvs2svnUpgrade subversion-pythonUpgrade subversion-debuginfoUpgrade subversion-ruby-debuginfoUpgrade subversion-server-debuginfoUpgrade subversion-serverUpgrade subversion-toolsUpgrade subversion-debugsourceUpgrade sle-sdk-releaseUpgrade subversion-tools-debuginfoUpgrade subversion-python-debuginfoUpgrade libsvn_auth_gnome_keyring-1-0-debuginfoUpgrade subversionUpgrade subversion-ruby | Dec 12, 2013 | May 2, 2013 |
| Ubuntu | — | Upgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | May 2, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub