CVE-2015-0248: Apache Subversion

Medium severity, CVSS 5.0. EPSS: 12.8% chance of exploitation in the next 30 days.

The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.

Affected products

• Apache Subversion: version 1.6.0 only; version 1.6.1 only; version 1.6.2 only; version 1.6.3 only; version 1.6.4 only; version 1.6.5 only; …
• Apple Xcode: version 7.0 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Oracle Solaris: version 11.3 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Hpc Node: version 6 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Server Eus: version 6.7.z only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2015-04-08. Last modified 2026-06-17.