A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-subversion | Sep 20, 2017 | Aug 11, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade--mod_dav_svnamazon-linux-upgrade-subversion | Sep 1, 2017 | Aug 11, 2017 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 11, 2017 | |
| Centos_linux | — | centos-upgrade-mod_dav_svncentos-upgrade-subversioncentos-upgrade-subversion-debuginfocentos-upgrade-subversion-develcentos-upgrade-subversion-gnomecentos-upgrade-subversion-javahlcentos-upgrade-subversion-kdecentos-upgrade-subversion-libscentos-upgrade-subversion-perlcentos-upgrade-subversion-pythoncentos-upgrade-subversion-rubycentos-upgrade-subversion-tools | Aug 28, 2019 | Aug 11, 2017 |
| Debian | debian-upgrade-subversion | Aug 11, 2017 | Aug 10, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-vcs-subversion | Oct 30, 2017 | Aug 11, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-subversionhuawei-euleros-2_0_sp1-upgrade-subversion-libs | Nov 30, 2017 | Aug 11, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-subversionhuawei-euleros-2_0_sp2-upgrade-subversion-libs | Nov 30, 2017 | Aug 11, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-developer-versioning-subversion-1-7-20-0-175-3-24-0-2-0oracle-solaris-11-3-upgrade-library-java-subversion-1-7-20-0-175-3-24-0-2-0oracle-solaris-11-3-upgrade-library-perl-5-subversion-1-7-20-0-175-3-24-0-2-0oracle-solaris-11-3-upgrade-library-python-subversion-1-7-20-0-175-3-24-0-2-0oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Sep 19, 2017 | Aug 11, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-mod-dav-svnoracle-linux-upgrade-subversionoracle-linux-upgrade-subversion-develoracle-linux-upgrade-subversion-gnomeoracle-linux-upgrade-subversion-javahloracle-linux-upgrade-subversion-kdeoracle-linux-upgrade-subversion-libsoracle-linux-upgrade-subversion-perloracle-linux-upgrade-subversion-pythonoracle-linux-upgrade-subversion-rubyoracle-linux-upgrade-subversion-tools | Aug 16, 2017 | Aug 10, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-mod_dav_svnredhat-upgrade-subversionredhat-upgrade-subversion-debuginforedhat-upgrade-subversion-develredhat-upgrade-subversion-gnomeredhat-upgrade-subversion-javahlredhat-upgrade-subversion-kderedhat-upgrade-subversion-libsredhat-upgrade-subversion-perlredhat-upgrade-subversion-pythonredhat-upgrade-subversion-rubyredhat-upgrade-subversion-tools | Aug 16, 2017 | Aug 11, 2017 | |
| Suse | — | suse-upgrade-libsvn_auth_gnome_keyring-1-0suse-upgrade-subversionsuse-upgrade-subversion-bash-completionsuse-upgrade-subversion-develsuse-upgrade-subversion-perlsuse-upgrade-subversion-pythonsuse-upgrade-subversion-serversuse-upgrade-subversion-tools | Aug 14, 2017 | Aug 11, 2017 |
| Ubuntu | ubuntu-upgrade-libapache2-mod-svnubuntu-upgrade-libapache2-svnubuntu-upgrade-libsvn1ubuntu-upgrade-subversion | Aug 11, 2017 | Aug 11, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub