CVE-2010-4539: Apache Subversion

Medium severity, CVSS 6.8. EPSS: 5.1% chance of exploitation in the next 30 days.

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.

Affected products

• Apache Subversion: up to and including 1.6.14; version 0.6 only; version 0.7 only; version 0.8 only; version 0.9 only; version 0.10.0 only; …

Published 2011-01-07. Last modified 2026-06-16.