CVE-2013-1846
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1...
CVE-2013-1846 is a medium vulnerability (CVSS 4.0) in Apache Subversion, published May 2, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.73%, the 93rd percentile. Fixed in subversion 1.7.9-1.
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
Exploit likelihood
What each source reports
NVD Score used
4.0
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
- Record
CVE-2013-1846- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
- Record
CVE-2013-1846- Updated
- 2026-11-02
EUVDEUVD-2013-1853 No score
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
- Record
EUVD-2013-1853- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mv22-f57f-6934 No score
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1...
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
- Record
GHSA-mv22-f57f-6934- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
- Record
CVE-2013-1846- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1846 No score
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
- Record
DEBIAN-CVE-2013-1846- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10538-1 No score
libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media
These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10538-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0709-1 No score
Security update for subversion
Subversion has been updated to fix a security problem:
* bnc#889849: Reveal authentication information through an md5
collision attack on authentication realm (CVE-2014-3528)
Security Issues:
* CVE-2014-3528
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3528>
- Record
SUSE-SU-2015:0709-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
subversionDebian:12 |
before 1.7.9-1 | 1.7.9-1 |
subversionDebian:13 |
before 1.7.9-1 | 1.7.9-1 |
subversionDebian:14 |
before 1.7.9-1 | 1.7.9-1 |
subversionDebian:6.0 |
before 1.6.12dfsg-7+deb6u2, plus listed versions 1.6.12dfsg-41.6.12dfsg-51.6.12dfsg-5~bpo50+11.6.12dfsg-61.6.12dfsg-6~bpo50+11.6.12dfsg-7 |
1.6.12dfsg-7+deb6u2 |
mod_dav_svnRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
subversionRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
subversion-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
subversion-develRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
subversion-javahlRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
subversion-perlRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
subversion-rubyRed Hat:enterprise_linux:5::server |
before 0:1.6.11-11.el5_9 | 0:1.6.11-11.el5_9 |
mod_dav_svnRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversionRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-develRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-gnomeRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-javahlRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-kdeRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-perlRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-rubyRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-svn2clRed Hat:enterprise_linux:6::client |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
mod_dav_svnRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversionRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-develRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-gnomeRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-javahlRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-kdeRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-perlRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-rubyRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-svn2clRed Hat:enterprise_linux:6::computenode |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
mod_dav_svnRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversionRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-javahlRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-develRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-gnomeRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-kdeRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-perlRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-rubyRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-svn2clRed Hat:enterprise_linux:6::server |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
mod_dav_svnRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversionRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-javahlRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-develRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-gnomeRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-kdeRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-perlRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-rubyRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversion-svn2clRed Hat:enterprise_linux:6::workstation |
before 0:1.6.11-9.el6_4 | 0:1.6.11-9.el6_4 |
subversionopenSUSE:Tumbleweed |
before 1.9.5-1.1 | 1.9.5-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-updates/2013-04/msg00095.html
rhn.redhat.com/errata/RHSA-2013-0737.html
mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvSTMLbn4q_KM3Ph2UOeSiPGhEK4%3DSvwEjaHW_GUGkYWPQ%40mail.gmail.com%3E
bugzilla.redhat.com/show_bug.cgi?id=929087
mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvRoyVrZV12tgC0FMGrc6%2BMisd3qTcZ%2BDdpFGgTahkgAkQ%40mail.gmail.com%3E
ubuntu.com/usn/USN-1893-1
Show 77 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18087
lists.opensuse.org/opensuse-updates/2013-06/msg00069.html
subversion.apache.org/security/CVE-2013-1846-advisory.txt
mandriva.com/security/advisories?name=MDVSA-2013:153
nvd.nist.gov/vuln/detail/CVE-2013-1846
github.com/advisories/GHSA-mv22-f57f-6934
security-tracker.debian.org/tracker/CVE-2013-1846
access.redhat.com/errata/RHSA-2013:0737
access.redhat.com/security/updates/classification
subversion.apache.org/security/CVE-2013-1849-advisory.txt
subversion.apache.org/security/CVE-2013-1845-advisory.txt
subversion.apache.org/security/CVE-2013-1847-advisory.txt
bugzilla.redhat.com/show_bug.cgi?id=929082
bugzilla.redhat.com/show_bug.cgi?id=929090
bugzilla.redhat.com/show_bug.cgi?id=929093
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0737.json
access.redhat.com/security/cve/CVE-2013-1845
cve.org/CVERecord?id=CVE-2013-1845
nvd.nist.gov/vuln/detail/CVE-2013-1845
access.redhat.com/security/cve/CVE-2013-1846
cve.org/CVERecord?id=CVE-2013-1846
access.redhat.com/security/cve/CVE-2013-1847
cve.org/CVERecord?id=CVE-2013-1847
nvd.nist.gov/vuln/detail/CVE-2013-1847
access.redhat.com/security/cve/CVE-2013-1849
cve.org/CVERecord?id=CVE-2013-1849
nvd.nist.gov/vuln/detail/CVE-2013-1849
suse.com/support/update/announcement/2015/suse-su-20150709-1
bugzilla.suse.com/813913
bugzilla.suse.com/821505
bugzilla.suse.com/834014
bugzilla.suse.com/836245
bugzilla.suse.com/841205
bugzilla.suse.com/850667
bugzilla.suse.com/862459
bugzilla.suse.com/889849
bugzilla.suse.com/909935
bugzilla.suse.com/910376
bugzilla.suse.com/923794
bugzilla.suse.com/923795
suse.com/security/cve/CVE-2013-1845
suse.com/security/cve/CVE-2013-1846
suse.com/security/cve/CVE-2013-1847
suse.com/security/cve/CVE-2013-1849
suse.com/security/cve/CVE-2013-1884
suse.com/security/cve/CVE-2013-1968
suse.com/security/cve/CVE-2013-2112
suse.com/security/cve/CVE-2013-4277
suse.com/security/cve/CVE-2013-4505
suse.com/security/cve/CVE-2013-4558
suse.com/security/cve/CVE-2014-0032
suse.com/security/cve/CVE-2014-3528
suse.com/security/cve/CVE-2014-3580
suse.com/security/cve/CVE-2014-8108
suse.com/security/cve/CVE-2015-0248
suse.com/security/cve/CVE-2015-0251
suse.com/security/cve/CVE-2009-2411
suse.com/security/cve/CVE-2010-3315
suse.com/security/cve/CVE-2010-4539
suse.com/security/cve/CVE-2010-4644
suse.com/security/cve/CVE-2011-0715
suse.com/security/cve/CVE-2011-1752
suse.com/security/cve/CVE-2011-1783
suse.com/security/cve/CVE-2011-1921
suse.com/security/cve/CVE-2013-2088
suse.com/security/cve/CVE-2013-4131
suse.com/security/cve/CVE-2013-4246
suse.com/security/cve/CVE-2013-4262
suse.com/security/cve/CVE-2014-3522
suse.com/security/cve/CVE-2015-0202
suse.com/security/cve/CVE-2015-3184
suse.com/security/cve/CVE-2015-3187
suse.com/security/cve/CVE-2015-5259
suse.com/security/cve/CVE-2015-5343
suse.com/security/cve/CVE-2016-2167
suse.com/security/cve/CVE-2016-2168
suse.com/security/cve/CVE-2016-8734