Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversion-perlUpgrade subversion-rubyUpgrade subversion-kdeUpgrade subversion-javahlUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversion-develUpgrade subversion-svn2clUpgrade subversion | Dec 1, 2016 | Jul 31, 2013 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Jul 31, 2013 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | May 31, 2013 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | Jul 31, 2013 |
| Oracle_linux | — | Upgrade mod_dav_svnUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-gnomeUpgrade subversion-svn2clUpgrade subversion-kdeUpgrade subversion-javahlUpgrade subversionUpgrade subversion-ruby | Oct 16, 2024 | Jul 31, 2013 |
| Suse | — | Upgrade subversionUpgrade cvs2svnUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-pythonUpgrade viewcvsUpgrade subversion-toolsUpgrade subversion-develUpgrade subversion-bash-completionUpgrade subversion-perlUpgrade subversion-serverUpgrade libsvn_auth_kwallet-1-0Upgrade sle-sdk-release | Dec 12, 2013 | Jul 31, 2013 |
| Ubuntu | — | Upgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | Jul 31, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub