Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libserfalma-upgrade-mod_dav_svnalma-upgrade-subversionalma-upgrade-subversion-develalma-upgrade-subversion-gnomealma-upgrade-subversion-javahlalma-upgrade-subversion-libsalma-upgrade-subversion-perlalma-upgrade-subversion-toolsalma-upgrade-utf8proc | May 4, 2022 | Mar 17, 2021 | |
| Alpine Linux | alpine-linux-upgrade-subversion | Mar 26, 2024 | Mar 17, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-subversion | Feb 25, 2021 | Feb 10, 2021 |
| Centos_linux | — | centos-upgrade-libserfcentos-upgrade-libserf-debuginfocentos-upgrade-libserf-debugsourcecentos-upgrade-mod_dav_svncentos-upgrade-mod_dav_svn-debuginfocentos-upgrade-subversioncentos-upgrade-subversion-debuginfocentos-upgrade-subversion-debugsourcecentos-upgrade-subversion-develcentos-upgrade-subversion-devel-debuginfocentos-upgrade-subversion-gnomecentos-upgrade-subversion-gnome-debuginfocentos-upgrade-subversion-javahlcentos-upgrade-subversion-libscentos-upgrade-subversion-libs-debuginfocentos-upgrade-subversion-perlcentos-upgrade-subversion-perl-debuginfocentos-upgrade-subversion-toolscentos-upgrade-subversion-tools-debuginfocentos-upgrade-utf8proccentos-upgrade-utf8proc-debuginfocentos-upgrade-utf8proc-debugsource | Feb 16, 2021 | Feb 15, 2021 |
| Debian | debian-upgrade-subversion | Feb 16, 2021 | Feb 16, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-mod_dav_svnhuawei-euleros-2_0_sp8-upgrade-subversionhuawei-euleros-2_0_sp8-upgrade-subversion-libs | May 18, 2021 | Mar 17, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-subversionhuawei-euleros-2_0_sp9-upgrade-subversion-help | Jun 2, 2021 | Mar 17, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-versioning-subversion-1-14-1-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-java-subversion-1-14-1-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-perl-5-subversion-1-14-1-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-perl-5-subversion-522-1-10-6-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-perl-5-subversion-532-1-14-1-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-perl-522-subversion-64-1-7-5-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-python-subversion-27-1-10-6-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-library-python-subversion-37-1-14-1-11-4-33-0-1-94-0oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-subversion-1-14-1-11-4-33-0-1-94-0 | May 19, 2021 | Mar 17, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-libserforacle-linux-upgrade-mod-dav-svnoracle-linux-upgrade-subversionoracle-linux-upgrade-subversion-develoracle-linux-upgrade-subversion-gnomeoracle-linux-upgrade-subversion-javahloracle-linux-upgrade-subversion-libsoracle-linux-upgrade-subversion-perloracle-linux-upgrade-subversion-toolsoracle-linux-upgrade-utf8proc | Feb 20, 2021 | Feb 10, 2021 |
| Redhat_linux | redhat-upgrade-libserfredhat-upgrade-libserf-debuginforedhat-upgrade-libserf-debugsourceredhat-upgrade-mod_dav_svnredhat-upgrade-mod_dav_svn-debuginforedhat-upgrade-subversionredhat-upgrade-subversion-debuginforedhat-upgrade-subversion-debugsourceredhat-upgrade-subversion-develredhat-upgrade-subversion-devel-debuginforedhat-upgrade-subversion-gnomeredhat-upgrade-subversion-gnome-debuginforedhat-upgrade-subversion-javahlredhat-upgrade-subversion-libsredhat-upgrade-subversion-libs-debuginforedhat-upgrade-subversion-perlredhat-upgrade-subversion-perl-debuginforedhat-upgrade-subversion-toolsredhat-upgrade-subversion-tools-debuginforedhat-upgrade-utf8procredhat-upgrade-utf8proc-debuginforedhat-upgrade-utf8proc-debugsource | Feb 16, 2021 | Feb 15, 2021 | |
| Rocky_linux | rocky-upgrade-libserfrocky-upgrade-libserf-debuginforocky-upgrade-libserf-debugsourcerocky-upgrade-mod_dav_svnrocky-upgrade-mod_dav_svn-debuginforocky-upgrade-subversionrocky-upgrade-subversion-debuginforocky-upgrade-subversion-debugsourcerocky-upgrade-subversion-develrocky-upgrade-subversion-devel-debuginforocky-upgrade-subversion-gnomerocky-upgrade-subversion-gnome-debuginforocky-upgrade-subversion-libsrocky-upgrade-subversion-libs-debuginforocky-upgrade-subversion-perlrocky-upgrade-subversion-perl-debuginforocky-upgrade-subversion-toolsrocky-upgrade-subversion-tools-debuginforocky-upgrade-utf8procrocky-upgrade-utf8proc-debuginforocky-upgrade-utf8proc-debugsource | Mar 12, 2024 | Mar 17, 2021 | |
| Suse | — | suse-upgrade-libsvn_auth_gnome_keyring-1-0suse-upgrade-libsvn_auth_kwallet-1-0suse-upgrade-subversionsuse-upgrade-subversion-bash-completionsuse-upgrade-subversion-develsuse-upgrade-subversion-perlsuse-upgrade-subversion-pythonsuse-upgrade-subversion-python-ctypessuse-upgrade-subversion-rubysuse-upgrade-subversion-serversuse-upgrade-subversion-tools | Feb 12, 2021 | Feb 10, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libapache2-mod-svnubuntu-pro-upgrade-libapache2-svnubuntu-pro-upgrade-libsvn1ubuntu-pro-upgrade-subversionubuntu-upgrade-libapache2-mod-svnubuntu-upgrade-libsvn1ubuntu-upgrade-subversion | Mar 11, 2022 | Feb 10, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub