Every CVE Search/ Get API key

CVE-2013-1847

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1...

5.0 MediumPublic exploitFix available

CVE-2013-1847 is a medium vulnerability (CVSS 5.0) in Apache Subversion, published May 2, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 51.4%, the 98th percentile. Fixed in subversion 1.7.9-1.

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Exploit likelihood

51.4%Up 16.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Record
CVE-2013-1847
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Record
CVE-2013-1847
Updated
2026-11-02
EUVDEUVD-2013-1854 No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Record
EUVD-2013-1854
Updated
2026-11-03
GitHub AdvisoriesGHSA-2c79-3xrg-7c85 No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1...

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Record
GHSA-2c79-3xrg-7c85
Updated
2026-11-02
OSV No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Record
CVE-2013-1847
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1847 No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

Record
DEBIAN-CVE-2013-1847
Updated
2026-11-02
OSVopenSUSE-SU-2024:10538-1 No score

libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media

These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10538-1
Updated
2026-11-02
OSVSUSE-SU-2015:0709-1 No score

Security update for subversion

Subversion has been updated to fix a security problem:

* bnc#889849: Reveal authentication information through an md5
  collision attack on authentication realm (CVE-2014-3528)

Security Issues:

* CVE-2014-3528
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3528>
Record
SUSE-SU-2015:0709-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
subversion
Debian:12
 before 1.7.9-1
1.7.9-1
subversion
Debian:13
 before 1.7.9-1
1.7.9-1
subversion
Debian:14
 before 1.7.9-1
1.7.9-1
subversion
Debian:6.0
 before 1.6.12dfsg-7+deb6u2, plus listed versions
1.6.12dfsg-41.6.12dfsg-51.6.12dfsg-5~bpo50+11.6.12dfsg-61.6.12dfsg-6~bpo50+11.6.12dfsg-7
1.6.12dfsg-7+deb6u2
mod_dav_svn
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-devel
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-javahl
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-perl
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
Show 42 moreShow less
Affected packages
PackageAffectedFixed
subversion-ruby
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
mod_dav_svn
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
mod_dav_svn
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
mod_dav_svn
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
mod_dav_svn
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
openSUSE:Tumbleweed
 before 1.9.5-1.1
1.9.5-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBApache Subversion 1.6.x - 'mod_dav_svn/lock.c' Remote Denial of Service2013-04-05

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 77 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open