CVE-2010-4539
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed...
CVE-2010-4539 is a medium vulnerability (CVSS 6.8) in Apache Subversion, published January 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.14%, the 92nd percentile. Fixed in subversion 1.6.12dfsg-4.
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
Exploit likelihood
What each source reports
NVD Score used
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
- Record
CVE-2010-4539- CVSS 2.0
- 6.8 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
- Record
CVE-2010-4539- Updated
- 2026-11-02
EUVDEUVD-2010-4505 No score
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
- Record
EUVD-2010-4505- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m28q-h289-m2g5 No score
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed...
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
- Record
GHSA-m28q-h289-m2g5- Updated
- 2026-11-02
OSV No score
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
- Record
CVE-2010-4539- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4539 No score
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
- Record
DEBIAN-CVE-2010-4539- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10538-1 No score
libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media
These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10538-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
subversionDebian:12 |
before 1.6.12dfsg-4 | 1.6.12dfsg-4 |
subversionDebian:13 |
before 1.6.12dfsg-4 | 1.6.12dfsg-4 |
subversionDebian:14 |
before 1.6.12dfsg-4 | 1.6.12dfsg-4 |
mod_dav_svnRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
subversionRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
subversion-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
subversion-develRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
subversion-javahlRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
subversion-perlRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
subversion-rubyRed Hat:enterprise_linux:5::server |
before 0:1.6.11-7.el5_6.1 | 0:1.6.11-7.el5_6.1 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_dav_svnRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversionRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-develRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-gnomeRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-javahlRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-kdeRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-perlRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-rubyRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-svn2clRed Hat:enterprise_linux:6::client |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
mod_dav_svnRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversionRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-develRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-gnomeRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-javahlRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-kdeRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-perlRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-rubyRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-svn2clRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversionRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-develRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-gnomeRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-javahlRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-kdeRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-perlRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-rubyRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-svn2clRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
mod_dav_svnRed Hat:enterprise_linux:6::server |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversionRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-develRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-gnomeRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-kdeRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-perlRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-rubyRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-svn2clRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
mod_dav_svnRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversion-javahlRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-2.el6_0.2 | 0:1.6.11-2.el6_0.2 |
subversionopenSUSE:Tumbleweed |
before 1.9.5-1.1 | 1.9.5-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
exchange.xforce.ibmcloud.com/vulnerabilities/64472
openwall.com/lists/oss-security/2011/01/04/8
vupen.com/english/advisories/2011/0103
secunia.com/advisories/42969
Show 79 moreShow less
svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
securitytracker.com/id?1024934
lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html
mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E
redhat.com/support/errata/RHSA-2011-0258.html
mandriva.com/security/advisories?name=MDVSA-2011:006
ubuntu.com/usn/USN-1053-1
securityfocus.com/bid/45655
bugzilla.redhat.com/show_bug.cgi?id=667407
nvd.nist.gov/vuln/detail/CVE-2010-4539
github.com/advisories/GHSA-m28q-h289-m2g5
security-tracker.debian.org/tracker/CVE-2010-4539
access.redhat.com/errata/RHSA-2011:0257
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0257.json
cve.org/CVERecord?id=CVE-2010-4539
suse.com/security/cve/CVE-2009-2411