{"id":"CVE-2024-46901","aliases":["ALPINE-CVE-2024-46901","AZL-54056","AZL-54063","BELL-CVE-2024-46901","BIT-subversion-2024-46901","CLSA-2025-1754649017","CLSA-2025-1754649298","CLSA-2025-1754940263","CLSA-2025-1754940449","CLSA-2025-1754941300","CLSA-2025-1755004868","CLSA-2025-1755074254","CLSA-2025-1756408610","CLSA-2025-1756409018","CLSA-2025-1756489732","CLSA-2026-1778495013","DEBIAN-CVE-2024-46901","DLA-4127-1","EUVD-2024-42181","GHSA-53gr-8h72-9w7p","MGASA-2025-0058","OESA-2024-2538","SUSE-SU-2024:4366-1","SUSE-SU-2025:0871-1","UBUNTU-CVE-2024-46901","USN-7818-1","USN-7818-2","openSUSE-SU-2024:14570-1"],"status":"published","title":"Apache Subversion: mod_dav_svn denial-of-service via control characters in paths","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0193,"percentile":0.80278,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-116","CWE-20"],"published":"2024-12-09T09:36:52Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"subversion","fixed_in":["1.14.2-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"subversion","fixed_in":["1.14.3-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"subversion","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"subversion","fixed_in":["1.14.5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"mod_dav_svn","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-devel","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-gnome","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-javahl","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-kde","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-libs","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-perl","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-python","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-ruby","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"subversion-tools","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"mod_dav_svn","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-devel","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-gnome","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-javahl","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-kde","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-libs","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-perl","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-python","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-ruby","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"subversion-tools","fixed_in":["1.7.14-16.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-mod-svn","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-svn","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-dev","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-doc","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-java","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-perl","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-ruby1.8","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn1","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python-subversion","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ruby-svn","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion-tools","fixed_in":["1.9.3-2ubuntu1.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libapache2-mod-svn","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-dev","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-doc","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-java","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-perl","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn1","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-subversion","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ruby-svn","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"subversion","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"subversion-tools","fixed_in":["1.9.7-4ubuntu1.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_dav_svn","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-subversion","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-devel","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-gnome","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-javahl","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-libs","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-perl","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-ruby","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-tools","fixed_in":["1.14.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"mod_dav_svn","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-devel","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-gnome","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-javahl","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-kde","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-perl","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-ruby","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"subversion-svn2cl","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"mod_dav_svn","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-devel","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-gnome","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-javahl","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-kde","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-perl","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-ruby","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"subversion-svn2cl","fixed_in":["1.6.11-15.el6_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"mod_dav_svn","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-devel","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-gnome","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-javahl","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-libs","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-perl","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-ruby","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"subversion-tools","fixed_in":["1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"mod_dav_svn","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-devel","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-gnome","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-javahl","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-libs","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-perl","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-ruby","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"subversion-tools","fixed_in":["1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"mod_dav_svn","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-devel","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-gnome","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-javahl","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-libs","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-perl","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-ruby","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-tools","fixed_in":["1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"mod_dav_svn","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-subversion","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-devel","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-gnome","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-javahl","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-libs","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-perl","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-ruby","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-tools","fixed_in":["1.14.1-5.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"subversion","fixed_in":["1.14.2-4+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"subversion","fixed_in":["1.14.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"subversion","fixed_in":["1.14.5-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"subversion","fixed_in":["1.14.1-3+deb11u2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"subversion","fixed_in":["1.14.2-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"subversion","fixed_in":["1.12.2-8.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"subversion","fixed_in":["1.14.2-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"subversion","fixed_in":["1.14.3-6.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"subversion","fixed_in":["1.14.2-5.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"subversion","fixed_in":["1.14.2-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"subversion","fixed_in":["1.14.1-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"subversion","fixed_in":["1.10.6-3.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"subversion","fixed_in":["1.9.3-2ubuntu1.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"subversion","fixed_in":["1.9.7-4ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"subversion","fixed_in":["1.13.0-3ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"subversion","fixed_in":["1.14.1-3ubuntu0.22.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"subversion","fixed_in":["1.14.3-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"subversion","fixed_in":["1.14.5-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.2-r5"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.4-r0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"subversion","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.14.5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-16.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-mod-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn-ruby1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsvn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ruby-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libapache2-mod-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsvn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ruby-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"subversion-svn2cl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"subversion-svn2cl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.4.0+2306+9526616e.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.module_el8+2308+2a518522.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"mod_dav_svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-javahl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"subversion-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-5.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-4+deb12u1"}]}],"versions":["1.14.2-4"]},{"source":"osv","ecosystem":"Debian:13","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-3+deb11u2"}]}],"versions":["1.14.1-3","1.14.1-3+deb11u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-8.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-6.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-5.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+esm2"}]}],"versions":["1.8.13-1ubuntu3","1.9.2-3ubuntu1","1.9.2-3ubuntu2","1.9.3-1ubuntu1","1.9.3-2ubuntu1","1.9.3-2ubuntu1.1","1.9.3-2ubuntu1.3","1.9.3-2ubuntu1.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+esm1"}]}],"versions":["1.9.7-2ubuntu1","1.9.7-3ubuntu1","1.9.7-3ubuntu2","1.9.7-3ubuntu3","1.9.7-4ubuntu1","1.9.7-4ubuntu1+esm1","1.9.7-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-3ubuntu0.2+esm2"}]}],"versions":["1.10.6-1","1.10.6-1build1","1.13.0-1","1.13.0-1ubuntu1","1.13.0-2","1.13.0-2ubuntu2","1.13.0-3","1.13.0-3ubuntu0.1","1.13.0-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-3ubuntu0.22.04.1+esm1"}]}],"versions":["1.14.1-3","1.14.1-3build2","1.14.1-3build3","1.14.1-3build4","1.14.1-3ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-1ubuntu0.1~esm1"}]}],"versions":["1.14.2-4build2","1.14.2-4build3","1.14.2-4build4","1.14.2-5","1.14.3-1","1.14.3-1build1","1.14.3-1build2","1.14.3-1build3","1.14.3-1build4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu1.3+esm2"}]}],"versions":["1.8.13-1ubuntu3","1.9.2-3ubuntu1","1.9.2-3ubuntu2","1.9.3-1ubuntu1","1.9.3-2ubuntu1","1.9.3-2ubuntu1.1","1.9.3-2ubuntu1.3","1.9.3-2ubuntu1.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-4ubuntu1.1+esm1"}]}],"versions":["1.9.7-2ubuntu1","1.9.7-3ubuntu1","1.9.7-3ubuntu2","1.9.7-3ubuntu3","1.9.7-4ubuntu1","1.9.7-4ubuntu1+esm1","1.9.7-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-3ubuntu0.2+esm2"}]}],"versions":["1.10.6-1","1.10.6-1build1","1.13.0-1","1.13.0-1ubuntu1","1.13.0-2","1.13.0-2ubuntu2","1.13.0-3","1.13.0-3ubuntu0.1","1.13.0-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-3ubuntu0.22.04.1+esm1"}]}],"versions":["1.14.1-3","1.14.1-3build2","1.14.1-3build3","1.14.1-3build4","1.14.1-3ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-1ubuntu0.1~esm1"}]}],"versions":["1.14.2-4build2","1.14.2-4build3","1.14.2-4build4","1.14.2-5","1.14.3-1","1.14.3-1build1","1.14.3-1build2","1.14.3-1build3","1.14.3-1build4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"subversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-1.1"}]}]}],"products":[{"vendor":"apache","product":"subversion"},{"vendor":"apache software foundation","product":"apache subversion"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://subversion.apache.org/security/CVE-2024-46901-advisory.txt","tags":["vendor-advisory","Exploit","Vendor Advisory","web","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00023.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46901","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-53gr-8h72-9w7p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-46901","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-46901","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1754649017.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1754649298.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1754940263.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1754940449.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1754941300.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1755004868.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1755074254.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1756408610.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1756409018.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1756489732.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778495013.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46901.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-46901","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0058.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33838","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/12/09/1","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2538","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244366-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234317","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46901","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250871-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-46901","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46901","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7818-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7818-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EKNGNBYVIQD3V5V7WFOYTV47XMGMQY4A/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-46901","title":"Apache Subversion: mod_dav_svn denial-of-service via control characters in paths","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T09:36:52.445Z","modified":"2025-04-13T21:02:57.347Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-20","CWE-116"],"updated_at":"2026-11-02T14:34:08.500935Z"}],"euvd":[{"id":"EUVD-2024-42181","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T09:36:52Z","modified":"2025-04-13T21:02:57Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:52:33.975888Z"}],"ghsa":[{"id":"GHSA-53gr-8h72-9w7p","title":"Insufficient validation of filenames against control characters in Apache Subversion repositories...","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T12:31:07Z","modified":"2025-04-13T21:30:25Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:31.517Z"}],"nvd":[{"id":"CVE-2024-46901","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T10:15:05.23Z","modified":"2026-06-17T07:56:10.297Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-116"],"updated_at":"2026-11-02T14:10:39.434419Z"}],"osv":[{"id":"ALPINE-CVE-2024-46901","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T10:15:05.23Z","modified":"2026-11-02T11:17:50.114210022Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-46901","status":"published","published":"2024-12-10T06:02:51.200738Z","modified":"2026-01-26T09:38:32.938703Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:20.452786Z"},{"id":"CVE-2024-46901","title":"Apache Subversion: mod_dav_svn denial-of-service via control characters in paths","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T09:36:52.445Z","modified":"2026-10-28T02:30:52.88676633Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-116","CWE-20"],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"DEBIAN-CVE-2024-46901","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.  All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.  Repositories served via other access methods are not affected.","status":"published","published":"2024-12-09T10:15:05.23Z","modified":"2026-11-02T12:03:14.102174249Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:43.798789Z"},{"id":"OESA-2024-2538","title":"subversion security update","description":"Subversion exists to be universally recognized and adopted as an open-source, centralized version control system characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects, from individuals to large-scale enterprise operations.\r\n\r\nSecurity Fix(es):\r\n\r\nmod_dav_svn denial-of-service via control characters in paths(CVE-2024-46901)","status":"published","published":"2024-12-13T11:08:01Z","modified":"2026-08-18T01:17:43.896607735Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"UBUNTU-CVE-2024-46901","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.","status":"published","published":"2024-12-09T10:15:00Z","modified":"2026-04-22T15:10:23.925197Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"AZL-54056","title":"CVE-2024-46901 affecting package subversion for versions less than 1.14.2-2","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T10:15:05Z","modified":"2026-04-21T04:35:27.607272Z","updated_at":"2026-11-02T15:28:06.595149Z"},{"id":"AZL-54063","title":"CVE-2024-46901 affecting package subversion for versions less than 1.14.3-2","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-09T10:15:05Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.828909Z"},{"id":"BIT-subversion-2024-46901","title":"Apache Subversion: mod_dav_svn denial-of-service via control characters in paths","description":"Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.","status":"published","published":"2024-12-11T07:18:54.504Z","modified":"2025-07-16T08:37:34.844Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CLSA-2025-1754649017","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-08T10:30:22Z","modified":"2026-10-20T08:58:08.503878136Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1754649298","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-08T10:35:02Z","modified":"2026-06-01T00:33:27.609169169Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1754940263","title":"Fix CVE(s): CVE-2024-46901","description":"   * SECURITY UPDATE: Insufficient validation of filenames against control\n     characters in repositories served via mod_dav_svn\n   - debian/patches/CVE-2024-46901.patch: fix mod_dav_svn denial-of-service\n     via control characters in paths","status":"published","published":"2026-05-22T13:14:12Z","modified":"2026-06-04T10:03:41.86848Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1754940449","title":"Fix CVE(s): CVE-2024-46901","description":"   * SECURITY UPDATE: Insufficient validation of filenames against control\n     characters in repositories served via mod_dav_svn\n     - debian/patches/CVE-2024-46901.patch: fix mod_dav_svn denial-of-service\n       via control characters in paths","status":"published","published":"2025-08-11T19:27:33Z","modified":"2026-06-04T10:03:32.670351Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1754941300","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-11T19:41:43Z","modified":"2026-06-01T00:31:12.082059605Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755004868","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-12T13:21:12Z","modified":"2026-06-01T00:33:25.873666697Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755074254","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-13T08:37:38Z","modified":"2026-06-01T00:33:16.740586418Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1756408610","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-28T19:16:53Z","modified":"2026-06-01T00:33:12.134560928Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1756409018","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-28T19:23:42Z","modified":"2026-06-01T00:33:14.245031063Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1756489732","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2025-08-29T17:48:56Z","modified":"2026-06-01T00:32:59.602387065Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1778495013","title":"subversion: Fix of CVE-2024-46901","description":"- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths","status":"published","published":"2026-05-11T10:23:38Z","modified":"2026-06-01T00:32:52.177508878Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-4127-1","title":"subversion - security update","status":"published","published":"2025-04-13T00:00:00Z","modified":"2026-03-09T01:22:14.080042Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0058","title":"Updated subversion packages fix security vulnerability","description":"Insufficient validation of filenames against control characters in\nApache Subversion repositories served via mod_dav_svn allows\nauthenticated users with commit access to commit a corrupted revision,\nleading to disruption for users of the repository. (CVE-2024-46901)\n","status":"published","published":"2025-02-12T18:29:04Z","modified":"2026-04-16T04:43:06.864287046Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2024:14570-1","title":"libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media","description":"These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-11T00:00:00Z","modified":"2026-02-04T03:58:51.734332Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2024:4366-1","title":"Security update for subversion","description":"This update for subversion fixes the following issues:\n\n- CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317)\n","status":"published","published":"2024-12-17T16:38:27Z","modified":"2026-02-04T04:01:50.897326Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0871-1","title":"Security update for subversion","description":"This update for subversion fixes the following issues:\n\n- CVE-2024-46901: Fixed mod_dav_svn denial-of-service via control characters in paths (bsc#1234317)\n","status":"published","published":"2025-03-14T12:50:27Z","modified":"2026-02-04T02:24:39.905701Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-7818-1","title":"subversion vulnerability","description":"It was discovered that Apache Subversion incorrectly parsed control\ncharacters in filenames. An attacker could possibly use this issue to\ncommit a corrupted revision to a repository, leading to a denial of\nservice.","status":"published","published":"2025-10-13T14:39:24Z","modified":"2026-06-25T13:32:31.102256179Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7818-2","title":"subversion vulnerability","description":"USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides\nthe corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, and Ubuntu 24.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Apache Subversion incorrectly parsed control\n characters in filenames. An attacker could possibly use this issue to\n commit a corrupted revision to a repository, leading to a denial of\n service.","status":"published","published":"2025-10-16T12:37:40Z","modified":"2026-04-27T18:22:22.920618Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}