The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversionUpgrade subversion-libsUpgrade subversion-kdeUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-pythonUpgrade subversion-perlUpgrade subversion-gnomeUpgrade subversion-javahlUpgrade subversion-ruby | Dec 1, 2016 | Dec 18, 2014 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Dec 18, 2014 |
| Freebsd | — | Upgrade subversion16Upgrade subversion17Upgrade mod_dav_svnUpgrade subversion | Dec 10, 2025 | Dec 15, 2014 |
| Oracle_linux | — | Upgrade subversion-gnomeUpgrade subversion-libsUpgrade subversionUpgrade subversion-perlUpgrade mod_dav_svnUpgrade subversion-pythonUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-javahlUpgrade subversion-rubyUpgrade subversion-kde | Oct 16, 2024 | Dec 18, 2014 |
| Suse | — | Upgrade subversion-pythonUpgrade subversion-toolsUpgrade subversion-bash-completionUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-serverUpgrade subversionUpgrade libsvn_auth_kwallet-1-0Upgrade libsvn_auth_gnome_keyring-1-0 | Dec 18, 2015 | Dec 18, 2014 |
| Ubuntu | — | Upgrade subversionUpgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | Dec 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub