CVE Daily – Apache Subversion https://cvedaily.com/pages/tags/apache-subversion.html CVE Daily – Apache Subversion en Wed, 03 Jun 2026 21:26:52 +0000 [High] CVE-2026-29169 – A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earl... https://nvd.nist.gov/vuln/detail/CVE-2026-29169 https://nvd.nist.gov/vuln/detail/CVE-2026-29169 Mon, 04 May 2026 15:16:03 +0000 High CVE-2026-29169

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue,…

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [Low] CVE-2024-46901 – Insufficient validation of filenames against control characters in Apache Subver... https://nvd.nist.gov/vuln/detail/CVE-2024-46901 https://nvd.nist.gov/vuln/detail/CVE-2024-46901 Mon, 09 Dec 2024 10:15:05 +0000 Low CVE-2024-46901

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgr…

CVSS: 3.1 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2021-28544 – Apache Subversion SVN authz protected copyfrom paths regression Subversion serve... https://nvd.nist.gov/vuln/detail/CVE-2021-28544 https://nvd.nist.gov/vuln/detail/CVE-2021-28544 Tue, 12 Apr 2022 18:15:08 +0000 Medium CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' pat…

CVSS: 4.3 · CWE: CWE-200

View on NVD

]]> [High] CVE-2019-0203 – In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subver... https://nvd.nist.gov/vuln/detail/CVE-2019-0203 https://nvd.nist.gov/vuln/detail/CVE-2019-0203 Thu, 26 Sep 2019 16:15:10 +0000 High CVE-2019-0203

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [Medium] CVE-2018-11782 – In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subver... https://nvd.nist.gov/vuln/detail/CVE-2018-11782 https://nvd.nist.gov/vuln/detail/CVE-2018-11782 Thu, 26 Sep 2019 16:15:10 +0000 Medium CVE-2018-11782

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.

CVSS: 6.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2013-4246 – libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote ... https://nvd.nist.gov/vuln/detail/CVE-2013-4246 https://nvd.nist.gov/vuln/detail/CVE-2013-4246 Mon, 30 Oct 2017 14:29:00 +0000 High CVE-2013-4246

libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2016-8734 – Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16,... https://nvd.nist.gov/vuln/detail/CVE-2016-8734 https://nvd.nist.gov/vuln/detail/CVE-2016-8734 Mon, 16 Oct 2017 13:29:00 +0000 Medium CVE-2016-8734

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

CVSS: 6.5 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2016-2168 – The req_check_access function in the mod_authz_svn module in the httpd server in... https://nvd.nist.gov/vuln/detail/CVE-2016-2168 https://nvd.nist.gov/vuln/detail/CVE-2016-2168 Thu, 05 May 2016 18:59:01 +0000 Medium CVE-2016-2168

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2016-2167 – The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion... https://nvd.nist.gov/vuln/detail/CVE-2016-2167 https://nvd.nist.gov/vuln/detail/CVE-2016-2167 Thu, 05 May 2016 18:59:00 +0000 Medium CVE-2016-2167

The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string.

CVSS: 6.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2015-5343 – Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x befo... https://nvd.nist.gov/vuln/detail/CVE-2015-5343 https://nvd.nist.gov/vuln/detail/CVE-2015-5343 Thu, 14 Apr 2016 14:59:01 +0000 High CVE-2015-5343

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.

CVSS: 7.6 · CWE: CWE-119

View on NVD

]]> [High] CVE-2015-5259 – Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apach... https://nvd.nist.gov/vuln/detail/CVE-2015-5259 https://nvd.nist.gov/vuln/detail/CVE-2015-5259 Fri, 08 Jan 2016 19:59:01 +0000 High CVE-2015-5259

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

CVSS: 8.6 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2015-3187 – The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 a... https://nvd.nist.gov/vuln/detail/CVE-2015-3187 https://nvd.nist.gov/vuln/detail/CVE-2015-3187 Wed, 12 Aug 2015 14:59:12 +0000 Medium CVE-2015-3187

The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path.

CVSS: 4.0 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2015-3184 – mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, ... https://nvd.nist.gov/vuln/detail/CVE-2015-3184 https://nvd.nist.gov/vuln/detail/CVE-2015-3184 Wed, 12 Aug 2015 14:59:10 +0000 Medium CVE-2015-3184

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.

CVSS: 5.0 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2014-8108 – The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7... https://nvd.nist.gov/vuln/detail/CVE-2014-8108 https://nvd.nist.gov/vuln/detail/CVE-2014-8108 Thu, 18 Dec 2014 15:59:01 +0000 Medium CVE-2014-8108

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.

CVSS: 5.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2014-3580 – The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.1... https://nvd.nist.gov/vuln/detail/CVE-2014-3580 https://nvd.nist.gov/vuln/detail/CVE-2014-3580 Thu, 18 Dec 2014 15:59:00 +0000 Medium CVE-2014-3580

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

CVSS: 5.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2014-3528 – Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses... https://nvd.nist.gov/vuln/detail/CVE-2014-3528 https://nvd.nist.gov/vuln/detail/CVE-2014-3528 Tue, 19 Aug 2014 18:55:02 +0000 Medium CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.

CVSS: 4.0 · CWE: CWE-255

View on NVD

]]> [Medium] CVE-2014-3522 – The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8... https://nvd.nist.gov/vuln/detail/CVE-2014-3522 https://nvd.nist.gov/vuln/detail/CVE-2014-3522 Tue, 19 Aug 2014 18:55:02 +0000 Medium CVE-2014-3522

The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

CVSS: 4.0 · CWE: CWE-297

View on NVD

]]> [Medium] CVE-2014-0032 – The get_resource function in repos.c in the mod_dav_svn module in Apache Subvers... https://nvd.nist.gov/vuln/detail/CVE-2014-0032 https://nvd.nist.gov/vuln/detail/CVE-2014-0032 Fri, 14 Feb 2014 15:55:05 +0000 Medium CVE-2014-0032

The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.

CVSS: 4.3 · CWE: CWE-20

View on NVD

]]> [Low] CVE-2013-4505 – The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through... https://nvd.nist.gov/vuln/detail/CVE-2013-4505 https://nvd.nist.gov/vuln/detail/CVE-2013-4505 Sat, 07 Dec 2013 20:55:02 +0000 Low CVE-2013-4505

The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request.

CVSS: 2.6 · CWE: CWE-264

View on NVD

]]> [Low] CVE-2013-4277 – Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allow... https://nvd.nist.gov/vuln/detail/CVE-2013-4277 https://nvd.nist.gov/vuln/detail/CVE-2013-4277 Mon, 16 Sep 2013 19:14:39 +0000 Low CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.

CVSS: 3.3 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2011-1921 – The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subv... https://nvd.nist.gov/vuln/detail/CVE-2011-1921 https://nvd.nist.gov/vuln/detail/CVE-2011-1921 Mon, 06 Jun 2011 19:55:02 +0000 Medium CVE-2011-1921

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.

CVSS: 4.3 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2011-1783 – The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subv... https://nvd.nist.gov/vuln/detail/CVE-2011-1783 https://nvd.nist.gov/vuln/detail/CVE-2011-1783 Mon, 06 Jun 2011 19:55:01 +0000 Medium CVE-2011-1783

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.

CVSS: 4.3 · CWE: N/A

View on NVD

]]> [Medium] CVE-2011-1752 – The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subv... https://nvd.nist.gov/vuln/detail/CVE-2011-1752 https://nvd.nist.gov/vuln/detail/CVE-2011-1752 Mon, 06 Jun 2011 19:55:01 +0000 Medium CVE-2011-1752

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.

CVSS: 5.0 · CWE: CWE-476

View on NVD

]]> [Medium] CVE-2011-0715 – The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subv... https://nvd.nist.gov/vuln/detail/CVE-2011-0715 https://nvd.nist.gov/vuln/detail/CVE-2011-0715 Fri, 11 Mar 2011 22:55:05 +0000 Medium CVE-2011-0715

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.

CVSS: 4.3 · CWE: N/A

View on NVD

]]> [Low] CVE-2010-4644 – Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow rem... https://nvd.nist.gov/vuln/detail/CVE-2010-4644 https://nvd.nist.gov/vuln/detail/CVE-2010-4644 Fri, 07 Jan 2011 19:00:20 +0000 Low CVE-2010-4644

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.

CVSS: 3.5 · CWE: CWE-399

View on NVD

]]> [Medium] CVE-2010-4539 – The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Serve... https://nvd.nist.gov/vuln/detail/CVE-2010-4539 https://nvd.nist.gov/vuln/detail/CVE-2010-4539 Fri, 07 Jan 2011 19:00:19 +0000 Medium CVE-2010-4539

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.

CVSS: 6.8 · CWE: CWE-399

View on NVD

]]> [Medium] CVE-2010-3315 – authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in ... https://nvd.nist.gov/vuln/detail/CVE-2010-3315 https://nvd.nist.gov/vuln/detail/CVE-2010-3315 Mon, 04 Oct 2010 21:00:04 +0000 Medium CVE-2010-3315

authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.

CVSS: 6.0 · CWE: CWE-16

View on NVD

]]>