CVE-2022-24070

CVE-2022-24070 affects Subversion’s mod_dav_svn, where a use-after-free during path-based authorization lookups can lead to memory corruption and likely denial-of-service (HTTPD worker crash). The affected range is Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive); other Subversion...

CVE-2020-17525

CVE-2020-17525 affects Subversion’s mod_authz_svn. A crash occurs when using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client requests a non-existent repository URL, potentially disrupting service. Fixed in various builds: mod_dav_svn + mod_authz_svn servers ...

CVE-2019-0203

The CVE-2019-0203 issue affects Apache Subversion’s svnserve where certain protocol sequences can cause the svnserve process to exit, leading to a remote denial of service. Impact is disruption of service for Subversion servers. Affected Subversion releases include up to 1.9.10, 1.10.4, and 1.12....

CVE-2018-11803

CVE-2018-11803 affects Subversion’s mod_dav_svn Apache HTTPD module, specifically versions 1.11.0 and 1.10.0 through 1.10.3, where dereferencing an uninitialized pointer when the client omits the root path during a recursive directory listing can crash the server. The vulnerability is documented ...

CVE-2013-2088

CVE-2013-2088 affects Subversion where the pre-commit hook script caused by the file name containing shell metacharacters in contrib/hook-scripts/svn-keyword-check.pl can allow remote authenticated users with commit permissions to execute arbitrary commands. Public references and exploits (e.g., ...

CVE-2013-2112

Subversion vulnerability CVE-2013-2112 affects svnserve in Subversion versions prior to 1.6.23 and 1.7.x prior to 1.7.10. The issue allows remote attackers to cause a denial of service (svnserve exit) by aborting a connection. Documented impact is a DoS affecting the svnserve daemon when handling...

CVE-2015-0202

Summary: Subversion’s mod_dav_svn server (1.8.0–1.8.11) is vulnerable to a denial-of-service via a flood of REPORT requests that trigger traversal of FSFS repository nodes (CVE-2015-0202). Additional related flaws include an assertion DoS on certain requests with dynamic revision numbers (CVE-201...