Apache Subversion vulnerabilities

• apache subversion, debian linux +1 more Apache Subversion: mod_dav_svn denial-of-service via control characters in paths CVE-2024-46901 Fix available 3.1 LowDecember 9, 2024
• apache subversion Apache Subversion: Command line argument injection on Windows platforms CVE-2024-45720 Fix available 8.2 HighOctober 9, 2024
• apache subversion, apple macos, debian linux +1 more +3 more Apache Subversion mod_dav_svn is vulnerable to memory corruption CVE-2022-24070 Fix available 7.5 HighApril 12, 2021
• apache subversion, apple macos, debian linux +1 more +3 more Apache Subversion SVN authz protected copyfrom paths regression CVE-2021-28544 Fix available 4.3 MediumApril 12, 2021
• apache subversion, debian linux +1 more Remote unauthenticated denial-of-service in Subversion mod_authz_svn CVE-2020-17525 Fix available EPSS 40.1% 7.5 HighFebruary 10, 2021
• apache subversion In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve... CVE-2019-0203 Fix available 7.5 HighJuly 31, 2019
• apache subversion In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve... CVE-2018-11782 Fix available 6.5 MediumJuly 31, 2019
• apache subversion, canonical ubuntu linux +1 more Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash... CVE-2018-11803 Fix available EPSS 58.5% 7.5 HighJanuary 18, 2019
• apache subversion libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated... CVE-2013-4246 Fix available 8.8 HighOctober 30, 2017
• apache subversion A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x... CVE-2017-9800 Fix available EPSS 18.9% 9.8 CriticalAugust 10, 2017
• apache subversion, debian linux +1 more Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0... CVE-2016-8734 Fix available 6.5 MediumNovember 30, 2016
• apache subversion The req_check_access function in the mod_authz_svn module in the httpd server in Apache... CVE-2016-2168 Fix available EPSS 20.7% 6.5 MediumApril 29, 2016
• apache subversion The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16... CVE-2016-2167 Fix available 6.8 MediumApril 29, 2016
• apache subversion, debian linux +1 more Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1... CVE-2015-5343 Fix available EPSS 30.2% 7.6 HighDecember 15, 2015
• apache subversion Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9... CVE-2015-5259 Fix available EPSS 57.0% 8.6 HighDecember 15, 2015
• apache subversion, apple xcode +1 more The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1... CVE-2015-3187 Fix available 4.0 MediumAugust 5, 2015
• apache subversion, apple xcode +1 more mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache... CVE-2015-3184 Fix available 5.0 MediumAugust 5, 2015
• apache subversion, opensuse +1 more The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a... CVE-2015-0202 Fix available 7.8 HighApril 2, 2015
• apache subversion, apple xcode, opensuse +6 more +8 more The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote... CVE-2015-0251 Fix available 4.0 MediumAugust 19, 2014
• apache subversion, apple xcode, opensuse +6 more +8 more The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through... CVE-2015-0248 Fix available EPSS 12.8% 5.0 MediumAugust 19, 2014
• apache subversion, apple xcode, redhat enterprise linux desktop +3 more +5 more The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x... CVE-2014-8108 Fix available 5.0 MediumAugust 19, 2014
• apache subversion, apple xcode, debian linux +5 more +7 more The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x... CVE-2014-3580 Fix available EPSS 11.0% 5.0 MediumAugust 19, 2014
• apache subversion, apple xcode, canonical ubuntu linux +1 more +3 more The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10... CVE-2014-3522 Fix available 4.0 MediumAugust 12, 2014
• serf project serf, apache subversion, canonical ubuntu linux +2 more The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate... CVE-2014-3504 Fix available 4.0 MediumAugust 12, 2014
• apache subversion, apple xcode, canonical ubuntu linux +6 more +8 more Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of... CVE-2014-3528 Fix available 4.0 MediumAugust 5, 2014
• apache subversion The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges... CVE-2013-7393 Fix available 2.4 LowJuly 28, 2014
• apache subversion svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in... CVE-2013-4262 Fix available 2.4 LowJuly 28, 2014
• apache subversion The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15... CVE-2014-0032 Fix available EPSS 11.1% 4.3 MediumFebruary 14, 2014
• apache subversion, mod dav svn +1 more The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in... CVE-2013-4558 Fix available 3.5 LowNovember 30, 2013
• apache subversion, mod dontdothat +1 more The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0... CVE-2013-4505 Fix available 2.6 LowNovember 30, 2013
• apache subversion Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to... CVE-2013-4277 Fix available 3.3 LowSeptember 13, 2013
• apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1... CVE-2013-4131 Fix available 4.0 MediumJuly 31, 2013
• apache subversion, opensuse +1 more contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated... CVE-2013-2088 Public exploitFix available EPSS 31.5% 7.1 HighJuly 31, 2013
• apache subversion, canonical ubuntu linux, opensuse +2 more The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers... CVE-2013-2112 Fix available 7.8 HighJune 9, 2013
• apache subversion, canonical ubuntu linux, opensuse +2 more Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a... CVE-2013-1968 Fix available 5.5 MediumJune 9, 2013
• apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote... CVE-2013-1884 Public exploitFix available EPSS 50.5% 5.0 MediumMay 2, 2013
• apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1... CVE-2013-1849 Fix available 4.3 MediumMay 2, 2013
• apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1... CVE-2013-1847 Public exploitFix available EPSS 51.4% 5.0 MediumMay 2, 2013
• apache subversion, opensuse +1 more The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1... CVE-2013-1846 Fix available 4.0 MediumMay 2, 2013
• apache subversion, opensuse +1 more The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1... CVE-2013-1845 Fix available 2.1 LowMay 2, 2013
• apache subversion The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and... CVE-2011-1921 Fix available 4.3 MediumJune 2, 2011
• apache subversion, apple mac os x, canonical ubuntu linux +2 more +4 more The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and... CVE-2011-1783 Fix available 4.3 MediumJune 2, 2011
• apache subversion, apple mac os x, canonical ubuntu linux +2 more +4 more The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6... CVE-2011-1752 Fix available 5.0 MediumJune 2, 2011
• apache subversion The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6... CVE-2011-0715 Fix available 4.3 MediumMarch 4, 2011
• apache subversion Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated... CVE-2010-4644 Fix available 3.5 LowJanuary 7, 2011
• apache subversion The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed... CVE-2010-4539 Fix available 6.8 MediumJanuary 7, 2011
• apache subversion authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion... CVE-2010-3315 Fix available 6.0 MediumOctober 4, 2010