Apache Subversion < 1.6.21 / 1.7.x < 1.7.9 Multiple DoS

Versions of Apache Subversion prior to 1.6.21, or 1.7.x prior to 1.7.9 are vulnerable to the following vulnerabilities in the ‘mod_dav_svn’ Apache HTTPD server module :

• A flaw exists in the ‘mod_dav_svn’ that is triggered when handling node properties. (CVE-2013-1845)
• A NULL pointer dereference exists in the ‘mod_dav_svn’ module, triggered during the handling of a crafted Log REPORT request, URL lock request, LOCK request against non-existent URL, and URL PROPFIND request. (CVE-2013-1846, CVE-2013-1847, CVE-2013-1849)
• A NULL pointer dereference exists in the ‘mod_dav_svn’ module, triggered during the handling of a crafted Log REPORT request. This flaw reportedly affects Apache Subversion 1.7.x only. (CVE-2013-1884).