Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade subversion | Dec 18, 2015 | Dec 16, 2015 |
| Freebsd | — | Upgrade mod_dav_svnUpgrade subversion18Upgrade subversionUpgrade subversion17 | Dec 10, 2025 | Dec 15, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade subversion-libsUpgrade subversionUpgrade mod_dav_svn | Dec 4, 2019 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade subversionUpgrade subversion-libsUpgrade mod_dav_svn | Dec 18, 2019 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade subversionUpgrade subversion-libsUpgrade mod_dav_svn | Dec 11, 2019 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2015 |
| Suse | — | Upgrade subversionUpgrade libsvn_auth_kwallet-1-0Upgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-serverUpgrade subversion-pythonUpgrade subversion-develUpgrade subversion-bash-completion | Jan 7, 2016 | Jan 7, 2016 |
| Ubuntu | — | Upgrade subversion | Nov 19, 2024 | Apr 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub