The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversionUpgrade subversion-libsUpgrade subversion-gnomeUpgrade subversion-svn2clUpgrade subversion-pythonUpgrade subversion-develUpgrade subversion-kdeUpgrade subversion-toolsUpgrade mod_dav_svnUpgrade subversion-rubyUpgrade subversion-javahlUpgrade subversion-perl | Dec 1, 2016 | Dec 18, 2014 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Dec 18, 2014 |
| Freebsd | — | Upgrade subversionUpgrade subversion16Upgrade mod_dav_svnUpgrade subversion17 | Dec 10, 2025 | Dec 15, 2014 |
| Oracle_linux | — | Upgrade subversion-pythonUpgrade subversion-javahlUpgrade subversion-toolsUpgrade subversion-kdeUpgrade subversion-libsUpgrade subversionUpgrade subversion-rubyUpgrade subversion-gnomeUpgrade subversion-perlUpgrade mod_dav_svnUpgrade subversion-devel | Oct 16, 2024 | Dec 18, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2014 |
| Suse | — | Upgrade subversion-toolsUpgrade subversion-perlUpgrade subversion-bash-completionUpgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-develUpgrade subversion-serverUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-python | Dec 18, 2015 | Dec 18, 2014 |
| Ubuntu | — | Upgrade subversionUpgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | Dec 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub