The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Aug 30, 2017 | May 5, 2016 |
| Amazon_linux | — | Upgrade mod_dav_svnUpgrade subversion | Jul 1, 2017 | May 5, 2016 |
| Debian | — | Upgrade subversion | Apr 29, 2016 | Apr 29, 2016 |
| Freebsd | — | Upgrade subversion18Upgrade subversion | Dec 10, 2025 | Apr 28, 2016 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion.Upgrade net-libs/serf. | Oct 30, 2017 | May 5, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade subversionUpgrade mod_dav_svnUpgrade subversion-libs | Dec 4, 2019 | May 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade subversionUpgrade subversion-libsUpgrade mod_dav_svn | Dec 18, 2019 | May 5, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade subversionUpgrade subversion-libsUpgrade mod_dav_svn | Dec 11, 2019 | May 5, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | May 5, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2016 |
| Suse | — | Upgrade subversionUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-bash-completionUpgrade subversion-serverUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-toolsUpgrade subversion-pythonUpgrade libsvn_auth_kwallet-1-0 | May 6, 2016 | May 5, 2016 |
| Ubuntu | — | Upgrade libsvn1Upgrade subversionUpgrade libapache2-svn | Oct 25, 2017 | May 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub