SU
Product
Subversion
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 6Low 0
Watch
Add Subversion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-4246 | 8.8 | Oct 30 | libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.1 |
| CVE-2015-5259 | 8.6 | Jan 8 | Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn://… Affected: 1.9.0; 1.9.1; 1.9.2 |
| CVE-2024-45720 | 7.8 | Oct 9 | On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line… Affected: before 1.14.4 |
| CVE-2015-5343 | 7.6 | Apr 14 | Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service… Affected: 1.7.0 through 1.7.20; 1.8.0 before 1.8.15; 1.9.0 before 1.9.3 |
| CVE-2022-24070 | 7.5 | Apr 12 | Subversion's mod_dav_svn is vulnerable to memory corruption Affected: 1.10.0 before 1.10.8; 1.14.0 before 1.14.2 |
| CVE-2020-17525 | 7.5 | Mar 17 | Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a… Affected: 1.9.0 before 1.10.7; 1.11.0 before 1.14.1 |
| CVE-2019-0203 | 7.5 | Sep 26 | In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands Affected: through 1.9.10; 1.10.0 through 1.10.4; 1.11.0 through 1.11.1; 1.12.0 |
| CVE-2018-11803 | 7.5 | Feb 5 | Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a… Affected: 1.10.0 through 1.10.3; 1.11.0 |
Showing 8