Description
Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | subversion | 1.6.4dfsg-1 | — |
| Debian 13 | subversion | 1.6.4dfsg-1 | — |
| Debian 12 | subversion | 1.6.4dfsg-1 | — |
| Debian 5.0 | subversion | 1.5.1dfsg1-4 | DSA-1855-1 |
| Debian 4.0 | subversion | 1.4.2dfsg1-3 | DSA-1855-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | subversion +5 | 1.4.2-4.el5_3.1 | RHSA-2009:1203 |
| RHEL 4 | subversion +3 | 1.1.4-3.el4_8.2 | RHSA-2009:1203 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 | openSUSE-SU-2024:10538-1 |
Advisories 3
- RHSA-2009:1203 Red Hat Security Advisory: subversion security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1855-1 subversion - heap overflow Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10538-1 libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [dev] 20090806 Subversion 1.5.7 Released mailing-list
- 1022697 vdb-entry
- ADV-2009-2180 vdb-entry
- 20090807 Subversion heap overflow mailing-list
- 36262 third-party-advisory
- 36257 third-party-advisory
- 36184 third-party-advisory
- USN-812-1 vendor-advisory
- DSA-1855 vendor-advisory
- http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt
- 36224 third-party-advisory
- 35983 vdb-entry
- [dev] 20090806 Subversion 1.6.4 Released mailing-list
- FEDORA-2009-8449 vendor-advisory
- [dev] 20090806 Patch to 1.4.x branch for CVE-2009-2411 mailing-list
- http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES
- RHSA-2009:1203 vendor-advisory
- 36232 third-party-advisory
- http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES
- ADV-2009-3184 vdb-entry
- MDVSA-2009:199 vendor-advisory
- oval:org.mitre.oval:def:11465 vdb-entry signature
- 56856 vdb-entry
- APPLE-SA-2009-11-09-1 vendor-advisory
- http://support.apple.com/kb/HT3937
- FEDORA-2009-8432 vendor-advisory