Apache Subversion: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Low 3.1
  CVE-2024-46901

  Apache Subversion: mod_dav_svn denial-of-service via control characters in paths

  Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versi…

  Apache Software Foundation Apache Subversion subversion subversion Debian Ubuntu Azure Linux Alpine
  Dec 9, 2024

Revision history

1. 2025-10-16 #7

   Neue Updates von Ubuntu aufgenommen

2. 2025-10-13 #6

   Neue Updates von Ubuntu aufgenommen

3. 2025-04-13 #5

   Neue Updates von Debian aufgenommen

4. 2025-03-16 #4

   Neue Updates von SUSE aufgenommen

5. 2024-12-17 #3

   Neue Updates von SUSE aufgenommen

6. 2024-12-12 #2

   Neue Updates von openSUSE und Fedora aufgenommen

7. 2024-12-08 #1

   Initiale Fassung

References

• Apache Subversion Security Advisory vom 2024-12-08
  https://subversion.apache.org/security/CVE-2024-46901-advisory.txt
• OSS Security Mailing List vom 2024-12-08
  https://seclists.org/oss-sec/2024/q4/146
• openSUSE Security Update OPENSUSE-SU-2024:14570-1 vom 2024-12-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EKNGNBYVIQD3V5V7WFOYTV47XMGMQY4A/
• Fedora Security Advisory FEDORA-2024-93E88B1C0D vom 2024-12-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-93e88b1c0d
• SUSE Security Update SUSE-SU-2024:4366-1 vom 2024-12-17
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NW55B2XEWVYIEUT7P5DCODITXC5RDVJP/
• SUSE Security Update SUSE-SU-2025:0871-1 vom 2025-03-14
  https://lists.suse.com/pipermail/sle-security-updates/2025-March/020521.html
• Debian Security Advisory DLA-4127 vom 2025-04-13
  https://lists.debian.org/debian-lts-announce/2025/04/msg00023.html
• Ubuntu Security Notice USN-7818-1 vom 2025-10-13
  https://ubuntu.com/security/notices/USN-7818-1
• Ubuntu Security Notice USN-7818-2 vom 2025-10-16
  https://ubuntu.com/security/notices/USN-7818-2