The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Aug 30, 2017 | May 2, 2013 |
| Centos_linux | — | Upgrade subversion-javahlUpgrade subversion-svn2clUpgrade subversion-kdeUpgrade subversion-rubyUpgrade subversionUpgrade subversion-gnomeUpgrade subversion-develUpgrade subversion-perlUpgrade mod_dav_svn | Dec 1, 2016 | May 2, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | May 2, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | Apr 5, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | May 2, 2013 |
| Oracle_linux | — | Upgrade subversion-gnomeUpgrade subversion-develUpgrade subversion-kdeUpgrade subversion-javahlUpgrade subversion-rubyUpgrade subversion-svn2clUpgrade mod_dav_svnUpgrade subversion-perlUpgrade subversion | Oct 16, 2024 | May 2, 2013 |
| Suse | — | Upgrade subversion-tools-debuginfoUpgrade subversion-debugsourceUpgrade subversion-python-debuginfoUpgrade libsvn_auth_gnome_keyring-1-0-debuginfoUpgrade subversion-rubyUpgrade subversion-serverUpgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-server-debuginfoUpgrade subversion-perlUpgrade subversion-perl-debuginfoUpgrade subversion-develUpgrade subversion-ruby-debuginfoUpgrade subversion-pythonUpgrade sle-sdk-releaseUpgrade subversion-toolsUpgrade subversion-debuginfoUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-bash-completionUpgrade libsvn_auth_kwallet-1-0-debuginfo | Dec 12, 2013 | May 2, 2013 |
| Ubuntu | — | Upgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | May 2, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub