Every CVE Search/ Get API key

CVE-2020-17525

Remote unauthenticated denial-of-service in Subversion mod_authz_svn

7.5 HighFix available

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

40.1%Up 38.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
CVE-2020-17525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

Remote unauthenticated denial-of-service in Subversion mod_authz_svn

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
CVE-2020-17525
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2020-9463 0.0

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
EUVD-2020-9463
CVSS
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-w6m8-jhpf-wj94 No score

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules...

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
GHSA-w6m8-jhpf-wj94
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2020-17525 7.5

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
ALPINE-CVE-2020-17525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-6899 7.5

CVE-2020-17525 affecting package subversion for versions less than 1.14.0-4

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
AZL-6899
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVBELL-CVE-2020-17525 7.5

CVE-2020-17525 does not affect BellSoft software

Record
BELL-CVE-2020-17525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
CVE-2020-17525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-17525 7.5

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
DEBIAN-CVE-2020-17525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0507 7.5

Red Hat Security Advisory: subversion:1.10 security update

Record
RHSA-2021:0507
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0508 7.5

Red Hat Security Advisory: subversion:1.10 security update

Record
RHSA-2021:0508
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0509 7.5

Red Hat Security Advisory: subversion:1.10 security update

Record
RHSA-2021:0509
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2021:0507 7.5

Important: subversion:1.10 security update

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

  • subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2021:0507
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-17525 7.5

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
UBUNTU-CVE-2020-17525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2021:0507 No score

Important: subversion:1.10 security update

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

  • subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2021:0507
Updated
2026-11-02
OSVBIT-subversion-2020-17525 No score

Remote unauthenticated denial-of-service in Subversion mod_authz_svn

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Record
BIT-subversion-2020-17525
Updated
2026-11-02
OSVCLSA-2022-1660064148 No score

Fix CVE(s): CVE-2020-17525

  • SECURITY UPDATE: Denial of Service
    • debian/patches/CVE-2020-17525.patch: Add missing NULL check.
    • CVE-2020-17525
Record
CLSA-2022-1660064148
Updated
2026-11-02
OSVMGASA-2021-0091 No score

Updated subversion packages fix security dos vulnerability

Subversion has been updated to fix a remote unauthenticated denial-of-service in Subversion mod_authz_svn.

Record
MGASA-2021-0091
Updated
2026-11-02
OSVopenSUSE-SU-2021:0280-1 No score

Security update for subversion

This update for subversion fixes the following issues:

  • CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0280-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11412-1 No score

libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 on GA media

These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11412-1
Updated
2026-11-02
OSVSUSE-SU-2021:0424-1 No score

Security update for subversion

This update for subversion fixes the following issues:

  • CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).
Record
SUSE-SU-2021:0424-1
Updated
2026-11-02
OSVSUSE-SU-2021:0425-1 No score

Security update for subversion

This update for subversion fixes the following issues:

  • CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).
Record
SUSE-SU-2021:0425-1
Updated
2026-11-02
OSVUSN-5322-1 No score

subversion vulnerability

Thomas Akesson discovered that Subversion incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.

Record
USN-5322-1
Updated
2026-11-02
OSVUSN-5445-1 No score

subversion vulnerabilities

Ace Olszowka discovered that Subversion incorrectly handled certain svnserve requests. A remote attacker could possibly use this issue to cause svnserver to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-11782)

Tomas Bortoli discovered that Subversion incorrectly handled certain svnserve requests. A remote attacker could possibly use this issue to cause svnserver to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-0203)

Thomas Åkesson discovered that Subversion incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-17525)

Record
USN-5445-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
subversion
Alpine:v3.10
 1.9.0 up to 1.12.2-r1
1.12.2-r1
subversion
Alpine:v3.11
 1.9.0 up to 1.12.2-r2
1.12.2-r2
subversion
Alpine:v3.12
 1.9.0 up to 1.13.0-r3
1.13.0-r3
subversion
Alpine:v3.13
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.14
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.15
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.16
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.17
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.18
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.19
 1.9.0 up to 1.14.1-r0
1.14.1-r0
Show 147 moreShow less
Affected packages
PackageAffectedFixed
subversion
Alpine:v3.20
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.21
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.22
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.23
 1.9.0 up to 1.14.1-r0
1.14.1-r0
subversion
Alpine:v3.24
 1.9.0 up to 1.14.1-r0
1.14.1-r0
libserf
AlmaLinux:8
 before 1.3.9-9.module_el8.3.0+2053+ac338b6d
1.3.9-9.module_el8.3.0+2053+ac338b6d
libserf
AlmaLinux:8
 before 1.3.9-9.module_el8.6.0+2912+eb1cdf5a
1.3.9-9.module_el8.6.0+2912+eb1cdf5a
libserf
AlmaLinux:8
 before 1.3.9-9.module_el8.4.0+2266+ac338b6d
1.3.9-9.module_el8.4.0+2266+ac338b6d
mod_dav_svn
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
mod_dav_svn
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
mod_dav_svn
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
subversion
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
subversion-devel
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
subversion-devel
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion-devel
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
subversion-gnome
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
subversion-gnome
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
subversion-gnome
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion-javahl
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
subversion-libs
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion-libs
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
subversion-libs
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
subversion-perl
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
subversion-perl
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion-perl
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
subversion-tools
AlmaLinux:8
 before 1.10.2-4.module_el8.5.0+73+aa7e29ed
1.10.2-4.module_el8.5.0+73+aa7e29ed
subversion-tools
AlmaLinux:8
 before 1.10.2-4.module_el8.4.0+2266+ac338b6d
1.10.2-4.module_el8.4.0+2266+ac338b6d
subversion-tools
AlmaLinux:8
 before 1.10.2-4.module_el8.3.0+2053+ac338b6d
1.10.2-4.module_el8.3.0+2053+ac338b6d
utf8proc
AlmaLinux:8
 before 2.1.1-5.module_el8.4.0+2266+ac338b6d
2.1.1-5.module_el8.4.0+2266+ac338b6d
utf8proc
AlmaLinux:8
 before 2.1.1-5.module_el8.3.0+2053+ac338b6d
2.1.1-5.module_el8.3.0+2053+ac338b6d
utf8proc
AlmaLinux:8
 before 2.1.1-5.module_el8.6.0+2912+eb1cdf5a
2.1.1-5.module_el8.6.0+2912+eb1cdf5a
subversion
Azure Linux:2
 before 1.14.0-4
1.14.0-4
subversion
Bitnami
 1.9.0 up to 1.10.7, 1.11.0 up to 1.14.1
1.10.71.14.1
libapache2-mod-svn
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libapache2-svn
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libsvn-dev
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libsvn-doc
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libsvn-java
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libsvn-perl
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libsvn-ruby1.8
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
libsvn1
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
python-subversion
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
ruby-svn
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
subversion
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
subversion-tools
TuxCare:Ubuntu:16.04
 before 1.9.3-2ubuntu1.3+tuxcare.els1
1.9.3-2ubuntu1.3+tuxcare.els1
subversion
Debian:12
 before 1.14.1-1
1.14.1-1
subversion
Debian:13
 before 1.14.1-1
1.14.1-1
subversion
Debian:14
 before 1.14.1-1
1.14.1-1
subversion
Debian:9
 before 1.9.5-1+deb9u6, plus listed versions
1.9.5-11.9.5-1+deb9u11.9.5-1+deb9u21.9.5-1+deb9u31.9.5-1+deb9u41.9.5-1+deb9u5
1.9.5-1+deb9u6
subversion
Debian:10
 before 1.10.4-1+deb10u2, plus listed versions
1.10.4-11.10.4-1+deb10u1
1.10.4-1+deb10u2
subversion
Mageia:7
 before 1.10.7-1.mga7
1.10.7-1.mga7
libserf
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.9-9.module+el8.3.0+6671+2675c974
0:1.3.9-9.module+el8.3.0+6671+2675c974
libserf-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.9-9.module+el8.3.0+6671+2675c974
0:1.3.9-9.module+el8.3.0+6671+2675c974
libserf-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.9-9.module+el8.3.0+6671+2675c974
0:1.3.9-9.module+el8.3.0+6671+2675c974
mod_dav_svn
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
mod_dav_svn-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-devel
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-gnome
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-gnome-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-javahl
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-libs
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-perl
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-perl-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-tools
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
subversion-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.10.2-4.module+el8.3.0+9886+ac338b6d
0:1.10.2-4.module+el8.3.0+9886+ac338b6d
utf8proc
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.1-5.module+el8.3.0+6671+2675c974
0:2.1.1-5.module+el8.3.0+6671+2675c974
utf8proc-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.1-5.module+el8.3.0+6671+2675c974
0:2.1.1-5.module+el8.3.0+6671+2675c974
utf8proc-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.1-5.module+el8.3.0+6671+2675c974
0:2.1.1-5.module+el8.3.0+6671+2675c974
libserf
Red Hat:rhel_eus:8.2::appstream
 before 0:1.3.9-9.module+el8.2.0+9887+08558108
0:1.3.9-9.module+el8.2.0+9887+08558108
libserf-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.3.9-9.module+el8.2.0+9887+08558108
0:1.3.9-9.module+el8.2.0+9887+08558108
libserf-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:1.3.9-9.module+el8.2.0+9887+08558108
0:1.3.9-9.module+el8.2.0+9887+08558108
mod_dav_svn
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
mod_dav_svn-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-devel
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-devel-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-gnome
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-gnome-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-javahl
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-libs
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-libs-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-perl
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-perl-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-tools
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
subversion-tools-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.10.2-2.module+el8.2.0+9887+08558108.1
0:1.10.2-2.module+el8.2.0+9887+08558108.1
utf8proc
Red Hat:rhel_eus:8.2::appstream
 before 0:2.1.1-5.module+el8.2.0+9887+08558108
0:2.1.1-5.module+el8.2.0+9887+08558108
utf8proc-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:2.1.1-5.module+el8.2.0+9887+08558108
0:2.1.1-5.module+el8.2.0+9887+08558108
utf8proc-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:2.1.1-5.module+el8.2.0+9887+08558108
0:2.1.1-5.module+el8.2.0+9887+08558108
libserf
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
libserf-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
libserf-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
mod_dav_svn
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
mod_dav_svn-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-devel
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-devel-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-gnome
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-gnome-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-javahl
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-libs
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-libs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-perl
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-perl-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-tools
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-tools-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
utf8proc
Red Hat:rhel_eus:8.1::appstream
 before 0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
utf8proc-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
utf8proc-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
libserf
Rocky Linux:8
 before 0:1.3.9-9.module+el8.7.0+1065+42200b2e
0:1.3.9-9.module+el8.7.0+1065+42200b2e
libserf
Rocky Linux:8
 before 0:1.3.9-9.module+el8.4.0+407+38733e5a
0:1.3.9-9.module+el8.4.0+407+38733e5a
subversion
Rocky Linux:8
 before 0:1.10.2-4.module+el8.4.0+407+38733e5a
0:1.10.2-4.module+el8.4.0+407+38733e5a
utf8proc
Rocky Linux:8
 before 0:2.1.1-5.module+el8.4.0+407+38733e5a
0:2.1.1-5.module+el8.4.0+407+38733e5a
subversion
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.10.6-3.3.1
1.10.6-3.3.1
subversion
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Module for Development Tools 15 SP2
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Module for Server Applications 15 SP2
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Server 15-LTSS
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Manager Proxy 4.0
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Manager Retail Branch Server 4.0
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Manager Server 4.0
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
SUSE:Enterprise Storage 6
 before 1.10.6-3.15.1
1.10.6-3.15.1
subversion
Ubuntu:Pro:16.04:LTS
 before 1.9.3-2ubuntu1.3+esm1, plus listed versions
1.8.13-1ubuntu31.9.2-3ubuntu11.9.2-3ubuntu21.9.3-1ubuntu11.9.3-2ubuntu11.9.3-2ubuntu1.11.9.3-2ubuntu1.3
1.9.3-2ubuntu1.3+esm1
subversion
Ubuntu:18.04:LTS
 before 1.9.7-4ubuntu1.1, plus listed versions
1.9.7-2ubuntu11.9.7-3ubuntu11.9.7-3ubuntu21.9.7-3ubuntu31.9.7-4ubuntu1
1.9.7-4ubuntu1.1
subversion
Ubuntu:20.04:LTS
 before 1.13.0-3ubuntu0.2, plus listed versions
1.10.6-11.10.6-1build11.13.0-11.13.0-1ubuntu11.13.0-21.13.0-2ubuntu21.13.0-31.13.0-3ubuntu0.1
1.13.0-3ubuntu0.2
subversion
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 1.9.7-4ubuntu1.1, plus listed versions
1.9.7-2ubuntu11.9.7-3ubuntu11.9.7-3ubuntu21.9.7-3ubuntu31.9.7-4ubuntu1
1.9.7-4ubuntu1.1
subversion
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 1.13.0-3ubuntu0.2, plus listed versions
1.10.6-11.10.6-1build11.13.0-11.13.0-1ubuntu11.13.0-21.13.0-2ubuntu21.13.0-31.13.0-3ubuntu0.1
1.13.0-3ubuntu0.2
subversion
openSUSE:Leap 15.2
 before 1.10.6-lp152.2.9.1
1.10.6-lp152.2.9.1
subversion
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.14.1-1.11
1.14.1-1.11

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-17525 is a high vulnerability (CVSS 7.5) in Apache Subversion, published February 10, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 40.1%, the 98th percentile. Fixed in subversion 1.12.2-r1.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open