Every CVE Search/ Get API key

CVE-2013-1849

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1...

4.3 MediumFix available

CVE-2013-1849 is a medium vulnerability (CVSS 4.3) in Apache Subversion, published May 2, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.85%, the 95th percentile. Fixed in subversion 1.7.9-1.

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Exploit likelihood

8.85%Up 5.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Record
CVE-2013-1849
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Record
CVE-2013-1849
Updated
2026-11-02
EUVDEUVD-2013-1856 No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Record
EUVD-2013-1856
Updated
2026-11-03
GitHub AdvisoriesGHSA-7xgj-rr5f-9wv9 No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1...

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Record
GHSA-7xgj-rr5f-9wv9
Updated
2026-11-02
OSV No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Record
CVE-2013-1849
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1849 No score

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.

Record
DEBIAN-CVE-2013-1849
Updated
2026-11-02
OSVopenSUSE-SU-2024:10538-1 No score

libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media

These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10538-1
Updated
2026-11-02
OSVSUSE-SU-2015:0709-1 No score

Security update for subversion

Subversion has been updated to fix a security problem:

* bnc#889849: Reveal authentication information through an md5
  collision attack on authentication realm (CVE-2014-3528)

Security Issues:

* CVE-2014-3528
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3528>
Record
SUSE-SU-2015:0709-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
subversion
Debian:12
 before 1.7.9-1
1.7.9-1
subversion
Debian:13
 before 1.7.9-1
1.7.9-1
subversion
Debian:14
 before 1.7.9-1
1.7.9-1
subversion
Debian:6.0
 before 1.6.12dfsg-7+deb6u2, plus listed versions
1.6.12dfsg-41.6.12dfsg-51.6.12dfsg-5~bpo50+11.6.12dfsg-61.6.12dfsg-6~bpo50+11.6.12dfsg-7
1.6.12dfsg-7+deb6u2
mod_dav_svn
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-devel
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-javahl
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
subversion-perl
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
Show 42 moreShow less
Affected packages
PackageAffectedFixed
subversion-ruby
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-11.el5_9
0:1.6.11-11.el5_9
mod_dav_svn
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::client
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
mod_dav_svn
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::computenode
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
mod_dav_svn
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::server
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
mod_dav_svn
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-javahl
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-gnome
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-kde
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-perl
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-ruby
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion-svn2cl
Red Hat:enterprise_linux:6::workstation
 before 0:1.6.11-9.el6_4
0:1.6.11-9.el6_4
subversion
openSUSE:Tumbleweed
 before 1.9.5-1.1
1.9.5-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 78 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open