{"id":"CVE-2009-2411","aliases":["DEBIAN-CVE-2009-2411","DSA-1855-1","EUVD-2009-2407","GHSA-vmfg-4frj-fmfg","RHSA-2009:1203","openSUSE-SU-2024:10538-1"],"status":"published","title":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x...","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","severity":{"version":"2.0","score":8.5,"vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05112,"percentile":0.92438,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2009-08-07T19:00:00Z","modified":"2026-10-23T17:47:35Z","fixes":[{"ecosystem":"Debian:12","package":"subversion","fixed_in":["1.6.4dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"subversion","fixed_in":["1.6.4dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"subversion","fixed_in":["1.6.4dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:4.0","package":"subversion","fixed_in":["1.4.2dfsg1-3"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"subversion","fixed_in":["1.5.1dfsg1-4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"mod_dav_svn","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion-debuginfo","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion-devel","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion-perl","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"mod_dav_svn","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion-debuginfo","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion-devel","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion-perl","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"mod_dav_svn","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion-debuginfo","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion-devel","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion-perl","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"mod_dav_svn","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion-debuginfo","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion-devel","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion-perl","fixed_in":["0:1.1.4-3.el4_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mod_dav_svn","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-debuginfo","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-devel","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-javahl","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-perl","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-ruby","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mod_dav_svn","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-debuginfo","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-devel","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-javahl","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-perl","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-ruby","fixed_in":["0:1.4.2-4.el5_3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.4dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.4dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.4dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2dfsg1-3"}]}],"versions":["1.4.2dfsg1-2"]},{"source":"osv","ecosystem":"Debian:5.0","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1dfsg1-4"}]}],"versions":["1.5.1dfsg1-2","1.5.1dfsg1-3"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el4_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.el5_3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1.1"}]}],"bundled":37}],"products":[{"vendor":"subversion","product":"subversion"}],"references":[{"url":"http://svn.haxx.se/dev/archive-2009-08/0108.shtml","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securitytracker.com/id?1022697","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2009/2180","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://secunia.com/advisories/36262","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/36257","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/36184","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/usn-812-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1855","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/36224","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/35983","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://svn.haxx.se/dev/archive-2009-08/0107.shtml","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://svn.haxx.se/dev/archive-2009-08/0110.shtml","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1203.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/36232","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:199","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://osvdb.org/56856","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT3937","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2411","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vmfg-4frj-fmfg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-2411","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1203","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514744","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1203.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2411","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2411","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8734","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2009-2411","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","status":"published","published":"2009-08-07T19:00:00Z","modified":"2024-08-07T05:52:15.197Z","updated_at":"2026-11-02T14:33:23.041383Z"}],"euvd":[{"id":"EUVD-2009-2407","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","status":"published","published":"2009-08-07T19:00:00Z","modified":"2024-08-07T05:52:15Z","updated_at":"2026-11-03T01:39:17.005545Z"}],"ghsa":[{"id":"GHSA-vmfg-4frj-fmfg","title":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x...","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","status":"published","published":"2022-05-02T03:35:02Z","modified":"2023-01-31T05:07:51Z","updated_at":"2026-11-02T14:49:17.497915Z"}],"nvd":[{"id":"CVE-2009-2411","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","status":"published","published":"2009-08-07T19:30:00.297Z","modified":"2026-06-16T23:09:23.477Z","cvss":[{"version":"2.0","score":8.5,"vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:01:36.200173Z"}],"osv":[{"id":"CVE-2009-2411","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","status":"published","published":"2009-08-07T19:30:00Z","modified":"2026-04-10T03:40:49.172363Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2009-2411","description":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.","status":"published","published":"2009-08-07T19:30:00.297Z","modified":"2026-10-23T17:47:35.945839374Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"DSA-1855-1","title":"subversion - heap overflow","status":"published","published":"2009-08-08T00:00:00Z","modified":"2026-03-09T01:18:28.578549Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"openSUSE-SU-2024:10538-1","title":"libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media","description":"These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:49:28.015865Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2009:1203","title":"Red Hat Security Advisory: subversion security update","status":"published","published":"2024-09-15T18:05:31Z","modified":"2026-06-26T10:11:47Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}