Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversion-develUpgrade subversion-svn2clUpgrade subversionUpgrade subversion-kdeUpgrade subversion-gnomeUpgrade subversion-rubyUpgrade subversion-javahlUpgrade mod_dav_svnUpgrade subversion-perl | Dec 1, 2016 | Jul 31, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Jul 31, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | May 31, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | Jul 31, 2013 |
| Oracle_linux | — | Upgrade subversion-perlUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversion-develUpgrade subversion-rubyUpgrade subversion-javahlUpgrade subversionUpgrade subversion-kdeUpgrade subversion-svn2cl | Oct 16, 2024 | Jul 31, 2013 |
| Suse | — | Upgrade cvs2svnUpgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0Upgrade sle-sdk-releaseUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-bash-completionUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-serverUpgrade subversion-perlUpgrade viewcvsUpgrade subversion-python | Dec 12, 2013 | Jul 31, 2013 |
| Ubuntu | — | Upgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | Jul 31, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub