Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-perlUpgrade subversionUpgrade subversion-javahlUpgrade subversion-ruby | Dec 1, 2016 | Jan 7, 2011 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Jan 7, 2011 |
| Freebsd | — | Upgrade subversion-freebsdUpgrade subversion | Dec 10, 2025 | Jan 13, 2011 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | Jan 7, 2011 |
| Oracle_linux | — | Upgrade subversion-develUpgrade subversion-perlUpgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-javahlUpgrade subversion-kdeUpgrade subversion-svn2clUpgrade subversion-gnomeUpgrade subversion | Oct 16, 2024 | Jan 7, 2011 |
| Suse | — | Upgrade subversion-serverUpgrade subversion-develUpgrade libsvn_auth_kwallet-1-0Upgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-bash-completionUpgrade subversion-toolsUpgrade subversion-pythonUpgrade subversionUpgrade subversion-perl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsvn0Upgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | Jan 7, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub