CVE-2013-1968: Apache Subversion

Medium severity, CVSS 5.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.

Affected products

• Apache Subversion: up to and including 1.6.21; version 1.6.0 only; version 1.6.1 only; version 1.6.2 only; version 1.6.3 only; version 1.6.4 only; …
• Canonical Ubuntu Linux: version 12.04 only; version 12.10 only; version 13.04 only
• Collabnet Subversion: version 1.6.17 only
• Opensuse Opensuse: version 11.4 only

Published 2013-07-31. Last modified 2026-06-16.