A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Sep 20, 2017 | Aug 11, 2017 |
| Amazon_linux | — | Upgrade subversionUpgrade mod_dav_svn | Sep 1, 2017 | Aug 11, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 11, 2017 |
| Centos_linux | — | Upgrade subversionUpgrade subversion-rubyUpgrade subversion-pythonUpgrade subversion-develUpgrade subversion-debuginfoUpgrade subversion-libsUpgrade subversion-gnomeUpgrade subversion-perlUpgrade subversion-javahlUpgrade mod_dav_svnUpgrade subversion-toolsUpgrade subversion-kde | Aug 28, 2019 | Aug 11, 2017 |
| Debian | — | Upgrade subversion | Aug 11, 2017 | Aug 10, 2017 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | Aug 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade subversion-libsUpgrade subversion | Nov 30, 2017 | Aug 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade subversionUpgrade subversion-libs | Nov 30, 2017 | Aug 11, 2017 |
| Oracle Solaris | — | Upgrade developer/versioning/subversion to version 1.7.20-0.175.3.24.0.2.0 on Solaris 11.3Upgrade library/python/subversion to version 1.7.20-0.175.3.24.0.2.0 on Solaris 11.3Upgrade library/perl-5/subversion to version 1.7.20-0.175.3.24.0.2.0 on Solaris 11.3Upgrade library/java/subversion to version 1.7.20-0.175.3.24.0.2.0 on Solaris 11.3Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Sep 19, 2017 | Aug 11, 2017 |
| Oracle_linux | — | Upgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-pythonUpgrade subversion-gnomeUpgrade subversion-javahlUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-develUpgrade subversion-kdeUpgrade subversionUpgrade subversion-libs | Aug 16, 2017 | Aug 10, 2017 |
| Redhat_linux | — | Upgrade subversion-kdeUpgrade subversionUpgrade subversion-libsUpgrade subversion-pythonUpgrade subversion-perlUpgrade subversion-javahlUpgrade subversion-toolsUpgrade subversion-debuginfoUpgrade subversion-rubyNo solution existsUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-devel | Aug 16, 2017 | Aug 11, 2017 |
| Suse | — | Upgrade subversion-pythonUpgrade subversion-serverUpgrade subversion-bash-completionUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0 | Aug 14, 2017 | Aug 11, 2017 |
| Ubuntu | — | Upgrade subversionUpgrade libsvn1Upgrade libapache2-svnUpgrade libapache2-mod-svn | Aug 11, 2017 | Aug 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub