The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversion-javahlUpgrade subversion-toolsUpgrade subversion-pythonUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-kdeUpgrade subversion-perlUpgrade subversion-rubyUpgrade subversionUpgrade subversion-svn2clUpgrade subversion-libsUpgrade subversion-gnome | Dec 1, 2016 | Dec 18, 2014 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Dec 18, 2014 |
| Freebsd | — | Upgrade mod_dav_svnUpgrade subversion17Upgrade subversion16Upgrade subversion | Dec 10, 2025 | Dec 15, 2014 |
| Oracle_linux | — | Upgrade subversion-rubyUpgrade subversion-kdeUpgrade subversion-perlUpgrade mod_dav_svnUpgrade subversionUpgrade subversion-libsUpgrade subversion-toolsUpgrade subversion-develUpgrade subversion-gnomeUpgrade subversion-javahlUpgrade subversion-python | Oct 16, 2024 | Dec 18, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2014 |
| Suse | — | Upgrade subversion-pythonUpgrade subversion-bash-completionUpgrade subversion-serverUpgrade subversion-develUpgrade subversionUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-toolsUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-perl | Dec 18, 2015 | Dec 18, 2014 |
| Ubuntu | — | Upgrade libapache2-svnUpgrade subversionUpgrade libsvn1 | Nov 8, 2024 | Dec 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub