Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade subversion-gnomeUpgrade subversion-javahlUpgrade subversion-libsUpgrade mod_dav_svnUpgrade libserfUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversionUpgrade utf8proc | May 20, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade subversion | Mar 26, 2024 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade subversion-devel-debuginfoUpgrade subversion-debugsourceUpgrade python3-subversion-debuginfoUpgrade subversionUpgrade subversion-perl-debuginfoUpgrade subversion-libsUpgrade subversion-debuginfoUpgrade subversion-javahlUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-libs-debuginfoUpgrade subversion-tools-debuginfoUpgrade python3-subversionUpgrade subversion-devel | Feb 17, 2025 | Nov 4, 2021 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Applescript | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Archiveutility | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Automation | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Coretext | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Filesystemevents | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Icu | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Javascriptcore | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Liblouis | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Libxml2 | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Multitouch | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Pluginkit | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Psnormalizer | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Safari | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Smb | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Softwareupdate | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Spindump | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Spotlight | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Subversion | — | Upgrade macOS to the latest version | Jul 27, 2022 | Jul 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Centos_linux | — | Upgrade subversion-libsUpgrade subversionUpgrade python3-subversion-debuginfoUpgrade libserf-debugsourceUpgrade mod_dav_svn-debuginfoUpgrade subversion-gnome-debuginfoUpgrade subversion-ruby-debuginfoUpgrade subversion-debugsourceUpgrade python3-subversionUpgrade mod_dav_svnUpgrade subversion-debuginfoUpgrade libserf-debuginfoUpgrade subversion-tools-debuginfoUpgrade subversion-libs-debuginfoUpgrade utf8proc-debuginfoUpgrade subversion-javahlUpgrade subversion-perl-debuginfoUpgrade subversion-perlUpgrade subversion-gnomeUpgrade utf8proc-debugsourceUpgrade subversion-toolsUpgrade subversion-develUpgrade utf8procUpgrade libserfUpgrade subversion-devel-debuginfo | May 13, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade subversion | Apr 14, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mod_dav_svn-ltsUpgrade subversion-ltsUpgrade mod_dav_svnUpgrade subversion | Nov 4, 2022 | Apr 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade subversionUpgrade subversion-help | Aug 2, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade subversion-libsUpgrade mod_dav_svnUpgrade subversion | Jun 22, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade subversionUpgrade subversion-help | Jul 11, 2022 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade python3-subversionUpgrade subversion-javahlUpgrade subversion-perlUpgrade subversion-develUpgrade libserfUpgrade subversion-toolsUpgrade utf8procUpgrade subversion-gnomeUpgrade subversionUpgrade mod_dav_svnUpgrade subversion-libs | May 20, 2022 | Nov 4, 2021 |
| Redhat_linux | — | Upgrade libserfUpgrade utf8procUpgrade libserf-debuginfoUpgrade python3-subversionUpgrade subversion-tools-debuginfoUpgrade subversion-javahlUpgrade utf8proc-debugsourceUpgrade subversion-gnome-debuginfoUpgrade subversion-libs-debuginfoUpgrade utf8proc-debuginfoUpgrade subversion-debuginfoUpgrade libserf-debugsourceUpgrade subversion-debugsourceUpgrade python3-subversion-debuginfoUpgrade subversion-perl-debuginfoUpgrade mod_dav_svn-debuginfoUpgrade subversion-devel-debuginfoUpgrade subversion-ruby-debuginfoUpgrade subversion-perlUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-libsUpgrade subversion-toolsUpgrade subversionUpgrade subversion-devel | May 13, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade libserf-debuginfoUpgrade python3-subversionUpgrade subversion-libs-debuginfoUpgrade subversion-tools-debuginfoUpgrade libserfUpgrade subversion-toolsUpgrade subversion-gnomeUpgrade subversion-debuginfoUpgrade subversion-perl-debuginfoUpgrade utf8procUpgrade subversion-develUpgrade mod_dav_svnUpgrade subversion-devel-debuginfoUpgrade utf8proc-debugsourceUpgrade subversion-perlUpgrade utf8proc-debuginfoUpgrade python3-subversion-debuginfoUpgrade subversionUpgrade subversion-gnome-debuginfoUpgrade subversion-debugsourceUpgrade libserf-debugsourceUpgrade subversion-libsUpgrade mod_dav_svn-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade subversion-pythonUpgrade subversion-serverUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-perlUpgrade subversionUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-bash-completionUpgrade subversion-python-ctypesUpgrade subversion-rubyUpgrade libsvn_auth_gnome_keyring-1-0 | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade python3-subversionUpgrade libsvn-perlUpgrade python-subversionUpgrade libapache2-mod-svnUpgrade subversion-toolsUpgrade libsvn-javaUpgrade subversionUpgrade ruby-svnUpgrade libsvn1 | Apr 13, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub