In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libserfUpgrade utf8proc | May 4, 2022 | Sep 26, 2019 |
| Alpine Linux | — | Upgrade subversion | Nov 8, 2019 | Sep 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade subversion-javahlUpgrade subversion-rubyUpgrade subversion-develUpgrade mod_dav_svnUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-debuginfoUpgrade subversionUpgrade subversion-gnomeUpgrade subversion-libsUpgrade subversion-python | Oct 28, 2020 | Sep 26, 2019 |
| Amazon_linux | — | Upgrade subversion | Nov 7, 2019 | Aug 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 26, 2019 |
| Centos_linux | — | Upgrade subversion-develUpgrade subversion-kdeUpgrade subversion-libs-debuginfoUpgrade subversion-toolsUpgrade subversion-javahlUpgrade libserf-debuginfoUpgrade subversion-perlUpgrade subversion-debuginfoUpgrade utf8proc-debugsourceUpgrade subversion-tools-debuginfoUpgrade mod_dav_svnUpgrade subversion-rubyUpgrade utf8procUpgrade utf8proc-debuginfoUpgrade subversionUpgrade subversion-debugsourceUpgrade mod_dav_svn-debuginfoUpgrade subversion-devel-debuginfoUpgrade subversion-perl-debuginfoUpgrade subversion-libsUpgrade subversion-gnome-debuginfoUpgrade libserf-debugsourceUpgrade libserfUpgrade subversion-gnomeUpgrade subversion-python | Oct 1, 2020 | Sep 26, 2019 |
| Debian | — | Upgrade subversion | Aug 2, 2019 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade subversionUpgrade subversion-libsUpgrade mod_dav_svn | Feb 22, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade subversion-libsUpgrade subversionUpgrade mod_dav_svn | Jan 20, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade subversion-libsUpgrade subversionUpgrade mod_dav_svn | Feb 3, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade subversionUpgrade mod_dav_svnUpgrade subversion-libs | Apr 26, 2022 | Sep 26, 2019 |
| Oracle Solaris | — | Upgrade library/perl-5/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-522/subversion-64 to version 1.7.5-11.4.0.0.1.3.0 on Solaris 11.4Upgrade developer/versioning/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/subversion-27 to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/java/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/subversion-522 to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4 | Oct 16, 2019 | Sep 26, 2019 |
| Oracle_linux | — | Upgrade subversion-gnomeUpgrade subversion-pythonUpgrade subversion-toolsUpgrade libserfUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-perlUpgrade utf8procUpgrade subversion-javahlUpgrade subversion-libsUpgrade subversionUpgrade subversion-rubyUpgrade subversion-kde | Oct 14, 2020 | Jul 31, 2019 |
| Redhat_linux | — | Upgrade utf8procUpgrade subversion-debuginfoUpgrade subversion-javahlUpgrade libserfNo solution existsUpgrade subversion-libs-debuginfoUpgrade subversion-kdeUpgrade subversion-debugsourceUpgrade libserf-debugsourceUpgrade libserf-debuginfoUpgrade subversion-pythonUpgrade utf8proc-debugsourceUpgrade subversion-rubyUpgrade subversion-perlUpgrade subversion-gnomeUpgrade subversion-toolsUpgrade subversion-perl-debuginfoUpgrade subversion-libsUpgrade mod_dav_svnUpgrade subversion-devel-debuginfoUpgrade subversion-develUpgrade subversion-tools-debuginfoUpgrade subversionUpgrade subversion-gnome-debuginfoUpgrade utf8proc-debuginfoUpgrade mod_dav_svn-debuginfo | Oct 1, 2020 | Sep 26, 2019 |
| Rocky_linux | — | Upgrade utf8proc-debuginfoUpgrade libserf-debugsourceUpgrade libserf-debuginfoUpgrade libserfUpgrade utf8proc-debugsourceUpgrade utf8proc | Mar 12, 2024 | Sep 26, 2019 |
| Suse | — | Upgrade subversion-python-ctypesUpgrade subversion-pythonUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-serverUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-perlUpgrade subversion-develUpgrade subversion-bash-completionUpgrade subversion-rubyUpgrade subversionUpgrade subversion-tools | Aug 1, 2019 | Jul 31, 2019 |
| Ubuntu | — | Upgrade subversionUpgrade libapache2-mod-svnUpgrade libsvn1 | Aug 1, 2019 | Aug 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub