← Back

Subversion

subversion

Vendor: Apache • 47 CVEs

CVEs (47)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-1921
1Apache
1Subversion
Apr 29, 2026
Jun 6, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for file...Show more
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.Show less
CVE-2011-1783
5Apache
AppleCanonical+2 more
5Debian Linux
FedoraMac Os X+2 more
Apr 29, 2026
Jun 6, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of se...Show more
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.Show less
CVE-2011-1752
5Apache
AppleCanonical+2 more
5Debian Linux
FedoraMac Os X+2 more
Apr 29, 2026
Jun 6, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a b...Show more
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.Show less
CVE-2011-0715
1Apache
1Subversion
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that co...Show more
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.Show less
CVE-2010-4644
1Apache
1Subversion
Apr 29, 2026
Jan 7, 2011
N/A· v4
N/A· v3
3.5 LOW· v2
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
CVE-2010-4539
1Apache
1Subversion
Apr 29, 2026
Jan 7, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereferen...Show more
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.Show less
CVE-2010-3315
1Apache
1Subversion
Apr 29, 2026
Oct 4, 2010
N/A· v4
N/A· v3
6.0 MEDIUM· v2
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named r...Show more
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.Show less