In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libserfUpgrade utf8proc | May 4, 2022 | Sep 26, 2019 |
| Alpine Linux | — | Upgrade subversion | Nov 8, 2019 | Sep 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade subversion-perlUpgrade subversion-develUpgrade subversion-javahlUpgrade subversion-debuginfoUpgrade mod_dav_svnUpgrade subversion-rubyUpgrade subversion-toolsUpgrade subversion-libsUpgrade subversion-gnomeUpgrade subversion-pythonUpgrade subversion | Oct 28, 2020 | Sep 26, 2019 |
| Amazon_linux | — | Upgrade subversion | Nov 7, 2019 | Aug 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 26, 2019 |
| Centos_linux | — | Upgrade subversion-perl-debuginfoUpgrade subversion-pythonUpgrade mod_dav_svn-debuginfoUpgrade subversion-gnomeUpgrade subversion-debugsourceUpgrade subversionUpgrade subversion-gnome-debuginfoUpgrade subversion-libsUpgrade libserfUpgrade subversion-devel-debuginfoUpgrade libserf-debugsourceUpgrade subversion-javahlUpgrade subversion-libs-debuginfoUpgrade mod_dav_svnUpgrade utf8procUpgrade subversion-rubyUpgrade utf8proc-debuginfoUpgrade utf8proc-debugsourceUpgrade subversion-kdeUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-develUpgrade subversion-debuginfoUpgrade subversion-tools-debuginfoUpgrade libserf-debuginfo | Oct 1, 2020 | Sep 26, 2019 |
| Debian | — | Upgrade subversion | Aug 2, 2019 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mod_dav_svnUpgrade subversionUpgrade subversion-libs | Feb 22, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mod_dav_svnUpgrade subversion-libsUpgrade subversion | Jan 20, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade subversionUpgrade subversion-libsUpgrade mod_dav_svn | Feb 3, 2021 | Sep 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mod_dav_svnUpgrade subversionUpgrade subversion-libs | Apr 26, 2022 | Sep 26, 2019 |
| Oracle Solaris | — | Upgrade library/python/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade developer/versioning/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-522/subversion-64 to version 1.7.5-11.4.0.0.1.3.0 on Solaris 11.4Upgrade library/python/subversion-27 to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/java/subversion to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/subversion-522 to version 1.10.6-11.4.14.0.1.3.0 on Solaris 11.4 | Oct 16, 2019 | Sep 26, 2019 |
| Oracle_linux | — | Upgrade subversion-develUpgrade mod_dav_svnUpgrade subversion-toolsUpgrade subversion-gnomeUpgrade subversion-pythonUpgrade subversion-perlUpgrade libserfUpgrade subversion-kdeUpgrade subversion-javahlUpgrade subversionUpgrade subversion-libsUpgrade subversion-rubyUpgrade utf8proc | Oct 14, 2020 | Jul 31, 2019 |
| Redhat_linux | — | Upgrade mod_dav_svn-debuginfoUpgrade utf8proc-debuginfoUpgrade subversion-gnomeUpgrade subversion-toolsUpgrade subversionUpgrade utf8proc-debugsourceUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-libsUpgrade subversion-rubyUpgrade subversion-gnome-debuginfoUpgrade subversion-tools-debuginfoUpgrade subversion-devel-debuginfoUpgrade subversion-perl-debuginfoUpgrade subversion-kdeUpgrade subversion-javahlUpgrade subversion-debugsourceUpgrade libserfUpgrade subversion-debuginfoUpgrade utf8procUpgrade subversion-libs-debuginfoUpgrade subversion-pythonUpgrade libserf-debuginfoUpgrade libserf-debugsourceNo solution exists | Oct 1, 2020 | Sep 26, 2019 |
| Rocky_linux | — | Upgrade utf8proc-debugsourceUpgrade utf8procUpgrade libserfUpgrade libserf-debuginfoUpgrade libserf-debugsourceUpgrade utf8proc-debuginfo | Mar 12, 2024 | Sep 26, 2019 |
| Suse | — | Upgrade libsvn_auth_kwallet-1-0Upgrade subversion-bash-completionUpgrade subversion-rubyUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-toolsUpgrade subversionUpgrade subversion-serverUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-python-ctypesUpgrade subversion-python | Aug 1, 2019 | Jul 31, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-svnUpgrade libsvn1Upgrade subversion | Aug 1, 2019 | Aug 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub