Apache Subversion vulnerabilities

47 CVEs affecting Apache Subversion, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-46901, published 2024-12-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11803, published 2019-02-05. High severity, CVSS 7.5. EPSS: 58.5% chance of exploitation in the next 30 days. Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory…
CVE-2015-5259, published 2016-01-08. High severity, CVSS 8.6. EPSS: 57% chance of exploitation in the next 30 days. Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which…
CVE-2013-1847, published 2013-05-02. Medium severity, CVSS 5.0. EPSS: 51.4% chance of exploitation in the next 30 days. The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an…
CVE-2013-1884, published 2013-05-02. Medium severity, CVSS 5.0. EPSS: 50.5% chance of exploitation in the next 30 days. The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an…
CVE-2020-17525, published 2021-03-17. High severity, CVSS 7.5. EPSS: 40.1% chance of exploitation in the next 30 days. Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing…
CVE-2013-2088, published 2013-07-31. High severity, CVSS 7.1. EPSS: 31.5% chance of exploitation in the next 30 days. contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
CVE-2015-5343, published 2016-04-14. High severity, CVSS 7.6. EPSS: 30.2% chance of exploitation in the next 30 days. Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server…
CVE-2016-2168, published 2016-05-05. Medium severity, CVSS 6.5. EPSS: 20.7% chance of exploitation in the next 30 days. The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service…
CVE-2017-9800, published 2017-08-11. Critical severity, CVSS 9.8. EPSS: 18.9% chance of exploitation in the next 30 days. A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be…
CVE-2015-0248, published 2015-04-08. Medium severity, CVSS 5.0. EPSS: 12.8% chance of exploitation in the next 30 days. The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted…

Latest

CVE-2024-46901, published 2024-12-09. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision,…
CVE-2024-45720, published 2024-10-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line argument…
CVE-2022-24070, published 2022-04-12. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected…
CVE-2021-28544, published 2022-04-12. Medium severity, CVSS 4.3. EPSS: 2.8% chance of exploitation in the next 30 days. Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a…
CVE-2019-0203, published 2019-09-26. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to…
CVE-2018-11782, published 2019-09-26. Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days. In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can…
CVE-2013-4246, published 2017-10-30. High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days. libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive…
CVE-2016-8734, published 2017-10-16. Medium severity, CVSS 6.5. EPSS: 6.4% chance of exploitation in the next 30 days. Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The…