CVE-2024-46901
Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
CVE-2024-46901- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-20, CWE-116
- Updated
- 2026-11-02
EUVDEUVD-2024-42181
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
EUVD-2024-42181- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-53gr-8h72-9w7p
Insufficient validation of filenames against control characters in Apache Subversion repositories...
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
GHSA-53gr-8h72-9w7p- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
CVE-2024-46901- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-20, CWE-116
- Updated
- 2026-11-02
OSVALPINE-CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
ALPINE-CVE-2024-46901- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2024-46901
- Record
BELL-CVE-2024-46901- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 24 moreShow less
OSV
Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
CVE-2024-46901- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-116, CWE-20
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.
- Record
DEBIAN-CVE-2024-46901- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2024-2538
subversion security update
Subversion exists to be universally recognized and adopted as an open-source, centralized version control system characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects, from individuals to large-scale enterprise operations.
Security Fix(es):
mod_dav_svn denial-of-service via control characters in paths(CVE-2024-46901)
- Record
OESA-2024-2538- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.
- Record
UBUNTU-CVE-2024-46901- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVAZL-54056 No score
CVE-2024-46901 affecting package subversion for versions less than 1.14.2-2
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
AZL-54056- Updated
- 2026-11-02
OSVAZL-54063 No score
CVE-2024-46901 affecting package subversion for versions less than 1.14.3-2
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
AZL-54063- Updated
- 2026-11-05
OSVBIT-subversion-2024-46901 No score
Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
- Record
BIT-subversion-2024-46901- Updated
- 2026-11-02
OSVCLSA-2025-1754649017 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1754649017- Updated
- 2026-11-02
OSVCLSA-2025-1754649298 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1754649298- Updated
- 2026-11-02
OSVCLSA-2025-1754940263 No score
Fix CVE(s): CVE-2024-46901
- SECURITY UPDATE: Insufficient validation of filenames against control characters in repositories served via mod_dav_svn
- debian/patches/CVE-2024-46901.patch: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1754940263- Updated
- 2026-11-02
OSVCLSA-2025-1754940449 No score
Fix CVE(s): CVE-2024-46901
- SECURITY UPDATE: Insufficient validation of filenames against control
characters in repositories served via mod_dav_svn
- debian/patches/CVE-2024-46901.patch: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1754940449- Updated
- 2026-11-02
OSVCLSA-2025-1754941300 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1754941300- Updated
- 2026-11-02
OSVCLSA-2025-1755004868 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1755004868- Updated
- 2026-11-02
OSVCLSA-2025-1755074254 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1755074254- Updated
- 2026-11-02
OSVCLSA-2025-1756408610 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1756408610- Updated
- 2026-11-02
OSVCLSA-2025-1756409018 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1756409018- Updated
- 2026-11-02
OSVCLSA-2025-1756489732 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2025-1756489732- Updated
- 2026-11-02
OSVCLSA-2026-1778495013 No score
subversion: Fix of CVE-2024-46901
- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths
- Record
CLSA-2026-1778495013- Updated
- 2026-11-02
OSVMGASA-2025-0058 No score
Updated subversion packages fix security vulnerability
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. (CVE-2024-46901)
- Record
MGASA-2025-0058- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14570-1 No score
libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media
These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14570-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:4366-1 No score
Security update for subversion
This update for subversion fixes the following issues:
- CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317)
- Record
SUSE-SU-2024:4366-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:0871-1 No score
Security update for subversion
This update for subversion fixes the following issues:
- CVE-2024-46901: Fixed mod_dav_svn denial-of-service via control characters in paths (bsc#1234317)
- Record
SUSE-SU-2025:0871-1- Updated
- 2026-11-02
OSVUSN-7818-1 No score
subversion vulnerability
It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service.
- Record
USN-7818-1- Updated
- 2026-11-02
OSVUSN-7818-2 No score
subversion vulnerability
USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.
Original advisory details:
It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service.
- Record
USN-7818-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
subversionAlpine:v3.18 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAlpine:v3.19 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAlpine:v3.20 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAlpine:v3.21 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAlpine:v3.22 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAlpine:v3.23 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAlpine:v3.24 |
before 1.14.5-r0 | 1.14.5-r0 |
subversionAzure Linux:2 |
before 1.14.2-2 | 1.14.2-2 |
subversionAzure Linux:3 |
before 1.14.3-2 | 1.14.3-2 |
subversionAlpaquita:23 |
1.14.2-r5 up to 1.14.5-r0 | 1.14.5-r0 |
Show 136 moreShow less
| Package | Affected | Fixed |
|---|---|---|
subversionAlpaquita:stream |
1.14.4-r0 up to 1.14.5-r0 | 1.14.5-r0 |
subversionBitnami |
before 1.14.5 | 1.14.5 |
mod_dav_svnTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversionTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-develTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-gnomeTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-javahlTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-kdeTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-libsTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-perlTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-pythonTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-rubyTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-toolsTuxCare:OracleLinux:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
mod_dav_svnTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversionTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-develTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-gnomeTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-javahlTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-kdeTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-libsTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-perlTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-pythonTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-rubyTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
subversion-toolsTuxCare:RHEL:7 |
before 1.7.14-16.el7.tuxcare.els1 | 1.7.14-16.el7.tuxcare.els1 |
libapache2-mod-svnTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libapache2-svnTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libsvn-devTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libsvn-docTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libsvn-javaTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libsvn-perlTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libsvn-ruby1.8TuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libsvn1TuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
python-subversionTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
ruby-svnTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
subversionTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
subversion-toolsTuxCare:Ubuntu:16.04 |
before 1.9.3-2ubuntu1.3+tuxcare.els2 | 1.9.3-2ubuntu1.3+tuxcare.els2 |
libapache2-mod-svnTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
libsvn-devTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
libsvn-docTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
libsvn-javaTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
libsvn-perlTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
libsvn1TuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
python-subversionTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
ruby-svnTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
subversionTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
subversion-toolsTuxCare:Ubuntu:18.04 |
before 1.9.7-4ubuntu1.1+tuxcare.els1 | 1.9.7-4ubuntu1.1+tuxcare.els1 |
mod_dav_svnTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
python3-subversionTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversionTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-develTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-gnomeTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-javahlTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-libsTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-perlTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-rubyTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
subversion-toolsTuxCare:AlmaLinux:9.2 |
before 1.14.1-5.el9.tuxcare.els1 | 1.14.1-5.el9.tuxcare.els1 |
mod_dav_svnTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversionTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-develTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-gnomeTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-javahlTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-kdeTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-perlTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-rubyTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-svn2clTuxCare:OracleLinux:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
mod_dav_svnTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversionTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-develTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-gnomeTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-javahlTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-kdeTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-perlTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-rubyTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
subversion-svn2clTuxCare:CentOS:6 |
before 1.6.11-15.el6_7.tuxcare.els1 | 1.6.11-15.el6_7.tuxcare.els1 |
mod_dav_svnTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversionTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-develTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-gnomeTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-javahlTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-libsTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-perlTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-rubyTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
subversion-toolsTuxCare:CentOS:8.4 |
before 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 | 1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1 |
mod_dav_svnTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversionTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-develTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-gnomeTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-javahlTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-libsTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-perlTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-rubyTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
subversion-toolsTuxCare:CentOS:8.5 |
before 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 | 1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 |
mod_dav_svnTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversionTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-develTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-gnomeTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-javahlTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-libsTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-perlTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-rubyTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
subversion-toolsTuxCare:CentOS-Stream:8 |
before 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 | 1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 |
mod_dav_svnTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
python3-subversionTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversionTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-develTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-gnomeTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-javahlTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-libsTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-perlTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-rubyTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversion-toolsTuxCare:AlmaLinux:9.6 |
before 1.14.1-5.el9_0.tuxcare.els1 | 1.14.1-5.el9_0.tuxcare.els1 |
subversionDebian:12 |
before 1.14.2-4+deb12u1, plus listed versions 1.14.2-4 |
1.14.2-4+deb12u1 |
subversionDebian:13 |
before 1.14.5-1 | 1.14.5-1 |
subversionDebian:14 |
before 1.14.5-1 | 1.14.5-1 |
subversionDebian:11 |
before 1.14.1-3+deb11u2, plus listed versions 1.14.1-31.14.1-3+deb11u1 |
1.14.1-3+deb11u2 |
subversionMageia:9 |
before 1.14.2-2.1.mga9 | 1.14.2-2.1.mga9 |
subversionopenEuler:20.03-LTS-SP4 |
before 1.12.2-8.oe2003sp4 | 1.12.2-8.oe2003sp4 |
subversionopenEuler:22.03-LTS-SP1 |
before 1.14.2-5.oe2203sp1 | 1.14.2-5.oe2203sp1 |
subversionopenEuler:24.03-LTS |
before 1.14.3-6.oe2403 | 1.14.3-6.oe2403 |
subversionopenEuler:22.03-LTS-SP4 |
before 1.14.2-5.oe2203sp4 | 1.14.2-5.oe2203sp4 |
subversionopenEuler:22.03-LTS-SP3 |
before 1.14.2-5.oe2203sp3 | 1.14.2-5.oe2203sp3 |
subversionSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionSUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionSUSE:Linux Enterprise Module for Development Tools 15 SP6 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionopenSUSE:Leap 15.5 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionopenSUSE:Leap 15.6 |
before 1.14.1-150400.5.3.1 | 1.14.1-150400.5.3.1 |
subversionSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 1.10.6-3.9.1 | 1.10.6-3.9.1 |
subversionUbuntu:Pro:16.04:LTS |
before 1.9.3-2ubuntu1.3+esm2, plus listed versions 1.8.13-1ubuntu31.9.2-3ubuntu11.9.2-3ubuntu21.9.3-1ubuntu11.9.3-2ubuntu11.9.3-2ubuntu1.11.9.3-2ubuntu1.31.9.3-2ubuntu1.3+esm1 |
1.9.3-2ubuntu1.3+esm2 |
subversionUbuntu:Pro:18.04:LTS |
before 1.9.7-4ubuntu1.1+esm1, plus listed versions 1.9.7-2ubuntu11.9.7-3ubuntu11.9.7-3ubuntu21.9.7-3ubuntu31.9.7-4ubuntu11.9.7-4ubuntu1+esm11.9.7-4ubuntu1.1 |
1.9.7-4ubuntu1.1+esm1 |
subversionUbuntu:Pro:20.04:LTS |
before 1.13.0-3ubuntu0.2+esm2, plus listed versions 1.10.6-11.10.6-1build11.13.0-11.13.0-1ubuntu11.13.0-2 Show 4 moreShow less1.13.0-2ubuntu21.13.0-31.13.0-3ubuntu0.11.13.0-3ubuntu0.2 |
1.13.0-3ubuntu0.2+esm2 |
subversionUbuntu:Pro:22.04:LTS |
before 1.14.1-3ubuntu0.22.04.1+esm1, plus listed versions 1.14.1-31.14.1-3build21.14.1-3build31.14.1-3build41.14.1-3ubuntu0.22.04.1 |
1.14.1-3ubuntu0.22.04.1+esm1 |
subversionUbuntu:Pro:24.04:LTS |
before 1.14.3-1ubuntu0.1~esm1, plus listed versions 1.14.2-4build21.14.2-4build31.14.2-4build41.14.2-51.14.3-1 Show 4 moreShow less1.14.3-1build11.14.3-1build21.14.3-1build31.14.3-1build4 |
1.14.3-1ubuntu0.1~esm1 |
subversionopenSUSE:Tumbleweed |
before 1.14.5-1.1 | 1.14.5-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-46901 is a low vulnerability (CVSS 3.1) in Apache Subversion, published December 9, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.93%, the 80th percentile. Fixed in subversion 1.14.5-r0.
References
subversion.apache.org/security/CVE-2024-46901-advisory.txt
lists.debian.org/debian-lts-announce/2025/04/msg00023.html
nvd.nist.gov/vuln/detail/CVE-2024-46901
github.com/advisories/GHSA-53gr-8h72-9w7p
security.alpinelinux.org/vuln/CVE-2024-46901
docs.bell-sw.com/security/cves/CVE-2024-46901
Show 26 moreShow less
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1754649017.html
security-tracker.debian.org/tracker/CVE-2024-46901
advisories.mageia.org/MGASA-2025-0058.html
bugs.mageia.org/show_bug.cgi?id=33838
openwall.com/lists/oss-security/2024/12/09/1
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-2538
suse.com/support/update/announcement/2024/suse-su-20244366-1
bugzilla.suse.com/1234317
ubuntu.com/security/CVE-2024-46901
cve.org/CVERecord?id=CVE-2024-46901
lists.opensuse.org/archives/list/[email protected]/thread/EKNGNBYVIQD3V5V7WFOYTV47XMGMQY4A