The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade subversion | Jul 30, 2024 | Apr 8, 2015 |
| Freebsd | — | Upgrade subversionUpgrade subversion16Upgrade mod_dav_svnUpgrade subversion17 | Dec 10, 2025 | Mar 31, 2015 |
| Gentoo Linux | — | Upgrade net-libs/serf.Upgrade dev-vcs/subversion. | Oct 30, 2017 | Apr 8, 2015 |
| Suse | — | Upgrade subversion-develUpgrade subversionUpgrade subversion-serverUpgrade subversion-bash-completionUpgrade subversion-perlUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-toolsUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-python | Dec 18, 2015 | Apr 8, 2015 |
| Ubuntu | — | Upgrade subversionUpgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | Apr 8, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub