Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libserfalma-upgrade-mod_dav_svnalma-upgrade-subversionalma-upgrade-subversion-develalma-upgrade-subversion-gnomealma-upgrade-subversion-javahlalma-upgrade-subversion-libsalma-upgrade-subversion-perlalma-upgrade-subversion-toolsalma-upgrade-utf8proc | May 20, 2022 | Apr 12, 2022 | |
| Alpine Linux | alpine-linux-upgrade-subversion | Mar 26, 2024 | Apr 12, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-python3-subversionamazon-linux-2023-upgrade-python3-subversion-debuginfoamazon-linux-2023-upgrade-subversionamazon-linux-2023-upgrade-subversion-debuginfoamazon-linux-2023-upgrade-subversion-debugsourceamazon-linux-2023-upgrade-subversion-develamazon-linux-2023-upgrade-subversion-devel-debuginfoamazon-linux-2023-upgrade-subversion-javahlamazon-linux-2023-upgrade-subversion-libsamazon-linux-2023-upgrade-subversion-libs-debuginfoamazon-linux-2023-upgrade-subversion-perlamazon-linux-2023-upgrade-subversion-perl-debuginfoamazon-linux-2023-upgrade-subversion-toolsamazon-linux-2023-upgrade-subversion-tools-debuginfo | Feb 17, 2025 | Nov 4, 2021 | |
| Apple Osx Subversion | apple-osx-upgrade-latest | Jul 27, 2022 | Apr 12, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Apr 12, 2022 | |
| Centos_linux | — | centos-upgrade-libserfcentos-upgrade-libserf-debuginfocentos-upgrade-libserf-debugsourcecentos-upgrade-mod_dav_svncentos-upgrade-mod_dav_svn-debuginfocentos-upgrade-python3-subversioncentos-upgrade-python3-subversion-debuginfocentos-upgrade-subversioncentos-upgrade-subversion-debuginfocentos-upgrade-subversion-debugsourcecentos-upgrade-subversion-develcentos-upgrade-subversion-devel-debuginfocentos-upgrade-subversion-gnomecentos-upgrade-subversion-gnome-debuginfocentos-upgrade-subversion-javahlcentos-upgrade-subversion-libscentos-upgrade-subversion-libs-debuginfocentos-upgrade-subversion-perlcentos-upgrade-subversion-perl-debuginfocentos-upgrade-subversion-ruby-debuginfocentos-upgrade-subversion-toolscentos-upgrade-subversion-tools-debuginfocentos-upgrade-utf8proccentos-upgrade-utf8proc-debuginfocentos-upgrade-utf8proc-debugsource | May 13, 2022 | Apr 12, 2022 |
| Debian | debian-upgrade-subversion | Apr 14, 2022 | Apr 12, 2022 | |
| Freebsd | freebsd-upgrade-package-subversionfreebsd-upgrade-package-mod_dav_svnfreebsd-upgrade-package-subversion-ltsfreebsd-upgrade-package-mod_dav_svn-lts | Nov 4, 2022 | Apr 13, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-subversionhuawei-euleros-2_0_sp10-upgrade-subversion-help | Aug 2, 2022 | Apr 12, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-mod_dav_svnhuawei-euleros-2_0_sp8-upgrade-subversionhuawei-euleros-2_0_sp8-upgrade-subversion-libs | Jun 22, 2022 | Apr 12, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-subversionhuawei-euleros-2_0_sp9-upgrade-subversion-help | Jul 11, 2022 | Apr 12, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-libserforacle-linux-upgrade-mod-dav-svnoracle-linux-upgrade-python3-subversionoracle-linux-upgrade-subversionoracle-linux-upgrade-subversion-develoracle-linux-upgrade-subversion-gnomeoracle-linux-upgrade-subversion-javahloracle-linux-upgrade-subversion-libsoracle-linux-upgrade-subversion-perloracle-linux-upgrade-subversion-toolsoracle-linux-upgrade-utf8proc | May 20, 2022 | Nov 4, 2021 |
| Redhat_linux | redhat-upgrade-libserfredhat-upgrade-libserf-debuginforedhat-upgrade-libserf-debugsourceredhat-upgrade-mod_dav_svnredhat-upgrade-mod_dav_svn-debuginforedhat-upgrade-python3-subversionredhat-upgrade-python3-subversion-debuginforedhat-upgrade-subversionredhat-upgrade-subversion-debuginforedhat-upgrade-subversion-debugsourceredhat-upgrade-subversion-develredhat-upgrade-subversion-devel-debuginforedhat-upgrade-subversion-gnomeredhat-upgrade-subversion-gnome-debuginforedhat-upgrade-subversion-javahlredhat-upgrade-subversion-libsredhat-upgrade-subversion-libs-debuginforedhat-upgrade-subversion-perlredhat-upgrade-subversion-perl-debuginforedhat-upgrade-subversion-ruby-debuginforedhat-upgrade-subversion-toolsredhat-upgrade-subversion-tools-debuginforedhat-upgrade-utf8procredhat-upgrade-utf8proc-debuginforedhat-upgrade-utf8proc-debugsource | May 13, 2022 | Apr 12, 2022 | |
| Rocky_linux | rocky-upgrade-libserfrocky-upgrade-libserf-debuginforocky-upgrade-libserf-debugsourcerocky-upgrade-mod_dav_svnrocky-upgrade-mod_dav_svn-debuginforocky-upgrade-python3-subversionrocky-upgrade-python3-subversion-debuginforocky-upgrade-subversionrocky-upgrade-subversion-debuginforocky-upgrade-subversion-debugsourcerocky-upgrade-subversion-develrocky-upgrade-subversion-devel-debuginforocky-upgrade-subversion-gnomerocky-upgrade-subversion-gnome-debuginforocky-upgrade-subversion-libsrocky-upgrade-subversion-libs-debuginforocky-upgrade-subversion-perlrocky-upgrade-subversion-perl-debuginforocky-upgrade-subversion-toolsrocky-upgrade-subversion-tools-debuginforocky-upgrade-utf8procrocky-upgrade-utf8proc-debuginforocky-upgrade-utf8proc-debugsource | Mar 12, 2024 | Apr 12, 2022 | |
| Suse | — | suse-upgrade-libsvn_auth_gnome_keyring-1-0suse-upgrade-libsvn_auth_kwallet-1-0suse-upgrade-subversionsuse-upgrade-subversion-bash-completionsuse-upgrade-subversion-develsuse-upgrade-subversion-perlsuse-upgrade-subversion-pythonsuse-upgrade-subversion-python-ctypessuse-upgrade-subversion-rubysuse-upgrade-subversion-serversuse-upgrade-subversion-tools | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | ubuntu-upgrade-libapache2-mod-svnubuntu-upgrade-libsvn-javaubuntu-upgrade-libsvn-perlubuntu-upgrade-libsvn1ubuntu-upgrade-python-subversionubuntu-upgrade-python3-subversionubuntu-upgrade-ruby-svnubuntu-upgrade-subversionubuntu-upgrade-subversion-tools | Apr 13, 2022 | Apr 12, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub