CVE-2011-1752: Apache Subversion

Medium severity, CVSS 5.0. EPSS: 8.5% chance of exploitation in the next 30 days.

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.

Affected products

• Apache Subversion: before 1.6.17 (fixed in 1.6.17)
• Apple Mac OS X: before 10.7.3 (fixed in 10.7.3)
• Canonical Ubuntu Linux: version 10.04 only; version 10.10 only; version 11.04 only
• Debian Debian Linux: version 5.0 only; version 6.0 only
• Fedoraproject Fedora: version 14 only; version 15 only

Published 2011-06-06. Last modified 2026-06-16.