CVE Daily – Apache Subversion (High+Critical) https://cvedaily.com/pages/tags/apache-subversion.html CVE Daily – Apache Subversion (High+Critical) en Wed, 03 Jun 2026 21:26:52 +0000 [High] CVE-2026-29169 – A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earl... https://nvd.nist.gov/vuln/detail/CVE-2026-29169 https://nvd.nist.gov/vuln/detail/CVE-2026-29169 Mon, 04 May 2026 15:16:03 +0000 High CVE-2026-29169

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue,…

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2019-0203 – In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subver... https://nvd.nist.gov/vuln/detail/CVE-2019-0203 https://nvd.nist.gov/vuln/detail/CVE-2019-0203 Thu, 26 Sep 2019 16:15:10 +0000 High CVE-2019-0203

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2013-4246 – libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote ... https://nvd.nist.gov/vuln/detail/CVE-2013-4246 https://nvd.nist.gov/vuln/detail/CVE-2013-4246 Mon, 30 Oct 2017 14:29:00 +0000 High CVE-2013-4246

libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2015-5343 – Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x befo... https://nvd.nist.gov/vuln/detail/CVE-2015-5343 https://nvd.nist.gov/vuln/detail/CVE-2015-5343 Thu, 14 Apr 2016 14:59:01 +0000 High CVE-2015-5343

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

CVSS: 7.6 · CWE: CWE-119

View on NVD

]]> [High] CVE-2015-5259 – Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apach... https://nvd.nist.gov/vuln/detail/CVE-2015-5259 https://nvd.nist.gov/vuln/detail/CVE-2015-5259 Fri, 08 Jan 2016 19:59:01 +0000 High CVE-2015-5259

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

CVSS: 8.6 · CWE: CWE-119

View on NVD

]]>