The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversionUpgrade subversion-rubyUpgrade subversion-kdeUpgrade subversion-svn2clUpgrade subversion-develUpgrade subversion-perlUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversion-javahl | Dec 1, 2016 | Jul 31, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Jul 31, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | May 31, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | Jul 31, 2013 |
| Oracle_linux | — | Upgrade subversion-gnomeUpgrade subversion-svn2clUpgrade subversionUpgrade subversion-javahlUpgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-kde | Oct 16, 2024 | Jul 31, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade subversion-serverUpgrade subversion-pythonUpgrade viewcvsUpgrade subversion-toolsUpgrade subversion-perlUpgrade subversion-develUpgrade libsvn_auth_kwallet-1-0Upgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0Upgrade cvs2svnUpgrade subversion-bash-completion | Dec 12, 2013 | Jul 31, 2013 |
| Ubuntu | — | Upgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | Jul 31, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub