The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Aug 30, 2017 | May 2, 2013 |
| Centos_linux | — | Upgrade subversion-perlUpgrade subversion-svn2clUpgrade subversion-gnomeUpgrade subversionUpgrade mod_dav_svnUpgrade subversion-rubyUpgrade subversion-develUpgrade subversion-kdeUpgrade subversion-javahl | Dec 1, 2016 | May 2, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | May 2, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | Apr 5, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | May 2, 2013 |
| Oracle Solaris | — | Upgrade developer/versioning/subversion to version 1.7.5-0.175.1.17.0.2.0 on Solaris 11.1 | May 29, 2017 | May 2, 2013 |
| Oracle_linux | — | Upgrade subversion-develUpgrade subversion-rubyUpgrade subversion-javahlUpgrade subversion-kdeUpgrade subversion-perlUpgrade subversion-svn2clUpgrade mod_dav_svnUpgrade subversionUpgrade subversion-gnome | Oct 16, 2024 | May 2, 2013 |
| Suse | — | Upgrade subversion-debuginfoUpgrade subversion-ruby-debuginfoUpgrade subversion-pythonUpgrade subversion-toolsUpgrade subversion-serverUpgrade libsvn_auth_kwallet-1-0-debuginfoUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-perl-debuginfoUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-server-debuginfoUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-bash-completionUpgrade cvs2svnUpgrade viewcvsUpgrade libsvn_auth_gnome_keyring-1-0-debuginfoUpgrade subversion-rubyUpgrade subversion-debugsourceUpgrade sle-sdk-releaseUpgrade subversion-python-debuginfoUpgrade subversion-tools-debuginfoUpgrade subversion | Dec 12, 2013 | May 2, 2013 |
| Ubuntu | — | Upgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | May 2, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub