{"id":"CVE-2020-17525","aliases":["ALPINE-CVE-2020-17525","ALSA-2021:0507","AZL-6899","BELL-CVE-2020-17525","BIT-subversion-2020-17525","CLSA-2022-1660064148","DEBIAN-CVE-2020-17525","DLA-2646-1","DSA-4851-1","EUVD-2020-9463","GHSA-w6m8-jhpf-wj94","MGASA-2021-0091","RHSA-2021:0507","RHSA-2021:0508","RHSA-2021:0509","RLSA-2021:0507","SUSE-SU-2021:0424-1","SUSE-SU-2021:0425-1","UBUNTU-CVE-2020-17525","USN-5322-1","USN-5445-1","openSUSE-SU-2021:0280-1","openSUSE-SU-2024:11412-1"],"status":"published","title":"Remote unauthenticated denial-of-service in Subversion mod_authz_svn","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.40075,"percentile":0.98645,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2021-02-10T12:00:00Z","modified":"2026-10-29T11:00:24Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"subversion","fixed_in":["1.12.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"subversion","fixed_in":["1.12.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"subversion","fixed_in":["1.13.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"subversion","fixed_in":["1.14.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libserf","fixed_in":["1.3.9-9.module_el8.3.0+2053+ac338b6d","1.3.9-9.module_el8.6.0+2912+eb1cdf5a","1.3.9-9.module_el8.4.0+2266+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"mod_dav_svn","fixed_in":["1.10.2-4.module_el8.5.0+73+aa7e29ed","1.10.2-4.module_el8.3.0+2053+ac338b6d","1.10.2-4.module_el8.4.0+2266+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion","fixed_in":["1.10.2-4.module_el8.4.0+2266+ac338b6d","1.10.2-4.module_el8.5.0+73+aa7e29ed","1.10.2-4.module_el8.3.0+2053+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion-devel","fixed_in":["1.10.2-4.module_el8.5.0+73+aa7e29ed","1.10.2-4.module_el8.4.0+2266+ac338b6d","1.10.2-4.module_el8.3.0+2053+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion-gnome","fixed_in":["1.10.2-4.module_el8.3.0+2053+ac338b6d","1.10.2-4.module_el8.5.0+73+aa7e29ed","1.10.2-4.module_el8.4.0+2266+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion-javahl","fixed_in":["1.10.2-4.module_el8.3.0+2053+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion-libs","fixed_in":["1.10.2-4.module_el8.4.0+2266+ac338b6d","1.10.2-4.module_el8.5.0+73+aa7e29ed","1.10.2-4.module_el8.3.0+2053+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion-perl","fixed_in":["1.10.2-4.module_el8.3.0+2053+ac338b6d","1.10.2-4.module_el8.4.0+2266+ac338b6d","1.10.2-4.module_el8.5.0+73+aa7e29ed"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"subversion-tools","fixed_in":["1.10.2-4.module_el8.5.0+73+aa7e29ed","1.10.2-4.module_el8.4.0+2266+ac338b6d","1.10.2-4.module_el8.3.0+2053+ac338b6d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"utf8proc","fixed_in":["2.1.1-5.module_el8.4.0+2266+ac338b6d","2.1.1-5.module_el8.3.0+2053+ac338b6d","2.1.1-5.module_el8.6.0+2912+eb1cdf5a"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"subversion","fixed_in":["1.14.0-4"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"subversion","fixed_in":["1.10.7","1.14.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-mod-svn","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-svn","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-dev","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-doc","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-java","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-perl","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-ruby1.8","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn1","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python-subversion","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ruby-svn","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion-tools","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"subversion","fixed_in":["1.14.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"subversion","fixed_in":["1.14.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"subversion","fixed_in":["1.14.1-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"subversion","fixed_in":["1.9.5-1+deb9u6"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"subversion","fixed_in":["1.10.4-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"subversion","fixed_in":["1.10.7-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libserf","fixed_in":["0:1.3.9-9.module+el8.3.0+6671+2675c974"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libserf-debuginfo","fixed_in":["0:1.3.9-9.module+el8.3.0+6671+2675c974"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libserf-debugsource","fixed_in":["0:1.3.9-9.module+el8.3.0+6671+2675c974"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_dav_svn","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_dav_svn-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-debugsource","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-devel","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-devel-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-gnome","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-gnome-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-javahl","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-libs","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-libs-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-perl","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-perl-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-tools","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-tools-debuginfo","fixed_in":["0:1.10.2-4.module+el8.3.0+9886+ac338b6d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"utf8proc","fixed_in":["0:2.1.1-5.module+el8.3.0+6671+2675c974"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"utf8proc-debuginfo","fixed_in":["0:2.1.1-5.module+el8.3.0+6671+2675c974"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"utf8proc-debugsource","fixed_in":["0:2.1.1-5.module+el8.3.0+6671+2675c974"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libserf","fixed_in":["0:1.3.9-9.module+el8.2.0+9887+08558108"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libserf-debuginfo","fixed_in":["0:1.3.9-9.module+el8.2.0+9887+08558108"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libserf-debugsource","fixed_in":["0:1.3.9-9.module+el8.2.0+9887+08558108"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_dav_svn","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_dav_svn-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-debugsource","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-devel","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-devel-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-gnome","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-gnome-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-javahl","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-libs","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-libs-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-perl","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-perl-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-tools","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-tools-debuginfo","fixed_in":["0:1.10.2-2.module+el8.2.0+9887+08558108.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"utf8proc","fixed_in":["0:2.1.1-5.module+el8.2.0+9887+08558108"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"utf8proc-debuginfo","fixed_in":["0:2.1.1-5.module+el8.2.0+9887+08558108"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"utf8proc-debugsource","fixed_in":["0:2.1.1-5.module+el8.2.0+9887+08558108"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libserf","fixed_in":["0:1.3.9-9.module+el8.1.0+9889+0a9c19c4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libserf-debuginfo","fixed_in":["0:1.3.9-9.module+el8.1.0+9889+0a9c19c4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libserf-debugsource","fixed_in":["0:1.3.9-9.module+el8.1.0+9889+0a9c19c4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_dav_svn","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_dav_svn-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-debugsource","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-devel","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-devel-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-gnome","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-gnome-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-javahl","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-libs","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-libs-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-perl","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-perl-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-tools","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-tools-debuginfo","fixed_in":["0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"utf8proc","fixed_in":["0:2.1.1-5.module+el8.1.0+9889+0a9c19c4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"utf8proc-debuginfo","fixed_in":["0:2.1.1-5.module+el8.1.0+9889+0a9c19c4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"utf8proc-debugsource","fixed_in":["0:2.1.1-5.module+el8.1.0+9889+0a9c19c4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libserf","fixed_in":["0:1.3.9-9.module+el8.7.0+1065+42200b2e","0:1.3.9-9.module+el8.4.0+407+38733e5a"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"subversion","fixed_in":["0:1.10.2-4.module+el8.4.0+407+38733e5a"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"utf8proc","fixed_in":["0:2.1.1-5.module+el8.4.0+407+38733e5a"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"subversion","fixed_in":["1.10.6-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"subversion","fixed_in":["1.10.6-3.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"subversion","fixed_in":["1.9.3-2ubuntu1.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"subversion","fixed_in":["1.9.7-4ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"subversion","fixed_in":["1.13.0-3ubuntu0.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"subversion","fixed_in":["1.10.6-lp152.2.9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.12.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.12.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.13.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.14.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-9.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-9.module_el8.6.0+2912+eb1cdf5a"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-9.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.5.0+73+aa7e29ed"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-4.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.module_el8.4.0+2266+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.module_el8.3.0+2053+ac338b6d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.module_el8.6.0+2912+eb1cdf5a"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-4"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"subversion","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.0"},{"fixed":"1.10.7"},{"introduced":"1.11.0"},{"fixed":"1.14.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-mod-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-ruby1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ruby-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1+deb9u6"}]}],"versions":["1.9.5-1","1.9.5-1+deb9u1","1.9.5-1+deb9u2","1.9.5-1+deb9u3","1.9.5-1+deb9u4","1.9.5-1+deb9u5"]},{"source":"osv","ecosystem":"Debian:10","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1+deb10u2"}]}],"versions":["1.10.4-1","1.10.4-1+deb10u1"]},{"source":"osv","ecosystem":"Mageia:7","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.3.0+6671+2675c974"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libserf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.3.0+6671+2675c974"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libserf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.3.0+6671+2675c974"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_dav_svn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"subversion-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.3.0+9886+ac338b6d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.3.0+6671+2675c974"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"utf8proc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.3.0+6671+2675c974"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"utf8proc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.3.0+6671+2675c974"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.2.0+9887+08558108"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libserf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.2.0+9887+08558108"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libserf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.2.0+9887+08558108"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_dav_svn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"subversion-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.2.0+9887+08558108.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.2.0+9887+08558108"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"utf8proc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.2.0+9887+08558108"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"utf8proc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.2.0+9887+08558108"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.1.0+9889+0a9c19c4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libserf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.1.0+9889+0a9c19c4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libserf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.1.0+9889+0a9c19c4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_dav_svn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"subversion-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.1.0+9889+0a9c19c4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"utf8proc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.1.0+9889+0a9c19c4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"utf8proc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.1.0+9889+0a9c19c4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.7.0+1065+42200b2e"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libserf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.9-9.module+el8.4.0+407+38733e5a"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.2-4.module+el8.4.0+407+38733e5a"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"utf8proc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.module+el8.4.0+407+38733e5a"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+esm1"}]}],"versions":["1.8.13-1ubuntu3","1.9.2-3ubuntu1","1.9.2-3ubuntu2","1.9.3-1ubuntu1","1.9.3-2ubuntu1","1.9.3-2ubuntu1.1","1.9.3-2ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1"}]}],"versions":["1.9.7-2ubuntu1","1.9.7-3ubuntu1","1.9.7-3ubuntu2","1.9.7-3ubuntu3","1.9.7-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-3ubuntu0.2"}]}],"versions":["1.10.6-1","1.10.6-1build1","1.13.0-1","1.13.0-1ubuntu1","1.13.0-2","1.13.0-2ubuntu2","1.13.0-3","1.13.0-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+esm1"}]}],"versions":["1.8.13-1ubuntu3","1.9.2-3ubuntu1","1.9.2-3ubuntu2","1.9.3-1ubuntu1","1.9.3-2ubuntu1","1.9.3-2ubuntu1.1","1.9.3-2ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1"}]}],"versions":["1.9.7-2ubuntu1","1.9.7-3ubuntu1","1.9.7-3ubuntu2","1.9.7-3ubuntu3","1.9.7-4ubuntu1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-3ubuntu0.2"}]}],"versions":["1.10.6-1","1.10.6-1build1","1.13.0-1","1.13.0-1ubuntu1","1.13.0-2","1.13.0-2ubuntu2","1.13.0-3","1.13.0-3ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-lp152.2.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1.11"}]}],"bundled":6}],"products":[{"vendor":"apache","product":"subversion"},{"vendor":"apache software foundation","product":"apache subversion"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://subversion.apache.org/security/CVE-2020-17525-advisory.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Vendor Advisory","web","fix","advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-17525","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-w6m8-jhpf-wj94"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-17525","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-0507.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-17525","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-17525","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1660064148","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-17525","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0091.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28348","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0507","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922303","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0507.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-17525","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-17525","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0508","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0508.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0509","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0509.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:0507","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210424-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181687","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17525","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210425-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-17525","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5322-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5445-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-11782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-0203","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3AYDPBGEGJD6YYQGO757Q7KZRTMVUY3O/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-0203","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-17525","title":"Remote unauthenticated denial-of-service in Subversion mod_authz_svn","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T09:20:14Z","modified":"2025-02-13T16:27:35.247Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-9463","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T09:20:14Z","modified":"2025-02-13T16:27:35Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"none"}],"updated_at":"2026-11-03T00:03:53.290549Z"}],"ghsa":[{"id":"GHSA-w6m8-jhpf-wj94","title":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules...","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2022-05-24T17:44:42Z","modified":"2023-01-29T05:05:42Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:45:51.307262Z"}],"nvd":[{"id":"CVE-2020-17525","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T10:15:11.873Z","modified":"2026-06-17T02:59:04.87Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:37.687844Z"}],"osv":[{"id":"ALPINE-CVE-2020-17525","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T10:15:11.873Z","modified":"2026-10-26T11:17:55.144823433Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-6899","title":"CVE-2020-17525 affecting package subversion for versions less than 1.14.0-4","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T10:15:11Z","modified":"2026-04-21T04:38:32.668286Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"BELL-CVE-2020-17525","title":"CVE-2020-17525 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:38.519799Z","modified":"2026-01-26T09:47:15.507589Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-17525","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T10:15:11.873Z","modified":"2026-10-24T10:30:18.376525786Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-17525","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-03-17T10:15:11.873Z","modified":"2026-10-26T12:02:28.804343441Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"RHSA-2021:0507","title":"Red Hat Security Advisory: subversion:1.10 security update","status":"published","published":"2024-09-16T05:24:48Z","modified":"2025-11-22T12:17:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0508","title":"Red Hat Security Advisory: subversion:1.10 security update","status":"published","published":"2024-09-16T05:24:56Z","modified":"2025-11-22T12:17:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0509","title":"Red Hat Security Advisory: subversion:1.10 security update","status":"published","published":"2024-09-16T05:25:04Z","modified":"2025-11-22T12:17:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:0507","title":"Important: subversion:1.10 security update","description":"Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.\n\nSecurity Fix(es):\n\n* subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-02-15T07:04:31Z","modified":"2026-02-04T11:00:06.589527Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-17525","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2021-02-10T12:00:00Z","modified":"2026-04-22T12:31:59.562737Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2021:0507","title":"Important: subversion:1.10 security update","description":"Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.\n\nSecurity Fix(es):\n\n* subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-02-15T07:04:31Z","modified":"2026-10-29T11:00:24.424392129Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-subversion-2020-17525","title":"Remote unauthenticated denial-of-service in Subversion mod_authz_svn","description":"Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7","status":"published","published":"2024-03-06T11:05:54.58Z","modified":"2025-05-20T10:02:07.006Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CLSA-2022-1660064148","title":"Fix CVE(s): CVE-2020-17525","description":"\n   * SECURITY UPDATE: Denial of Service\n     - debian/patches/CVE-2020-17525.patch: Add missing NULL check.\n     - CVE-2020-17525","status":"published","published":"2022-08-09T16:55:48Z","modified":"2026-06-04T10:03:17.323027Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-2646-1","title":"subversion - security update","status":"published","published":"2021-05-03T00:00:00Z","modified":"2026-03-09T01:21:03.45933Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4851-1","title":"subversion - security update","status":"published","published":"2021-02-13T00:00:00Z","modified":"2026-03-09T02:11:03.319957Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0091","title":"Updated subversion packages fix security dos vulnerability","description":"Subversion has been updated to fix a remote unauthenticated\ndenial-of-service in Subversion mod_authz_svn.\n","status":"published","published":"2021-02-28T23:16:12Z","modified":"2026-04-16T04:43:45.76731641Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0280-1","title":"Security update for subversion","description":"This update for subversion fixes the following issues:\n\n- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in\n    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-02-12T08:23:00Z","modified":"2026-02-04T02:46:25.539389Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11412-1","title":"libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 on GA media","description":"These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:43.120418Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:0424-1","title":"Security update for subversion","description":"This update for subversion fixes the following issues:\n\n- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in\n    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).\n","status":"published","published":"2021-02-10T14:51:44Z","modified":"2026-02-04T04:39:55.594412Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0425-1","title":"Security update for subversion","description":"This update for subversion fixes the following issues:\n\n- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in\n    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).\n","status":"published","published":"2021-02-10T14:56:52Z","modified":"2026-02-04T03:49:01.417722Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-5322-1","title":"subversion vulnerability","description":"Thomas Akesson discovered that Subversion incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2022-03-10T20:21:37Z","modified":"2026-06-25T13:31:02.95956354Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5445-1","title":"subversion vulnerabilities","description":"Ace Olszowka discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2018-11782)\n\nTomas Bortoli discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2019-0203)\n\nThomas Åkesson discovered that Subversion incorrectly handled certain\ninputs. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-17525)\n","status":"published","published":"2022-05-26T04:46:55Z","modified":"2026-04-22T10:23:56.605561Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}