Description
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | subversion | 1.6.12dfsg-4 | — |
| Debian 13 | subversion | 1.6.12dfsg-4 | — |
| Debian 12 | subversion | 1.6.12dfsg-4 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | subversion +8 | 1.6.11-2.el6_0.2 | RHSA-2011:0258 |
| RHEL 5 | subversion +5 | 1.6.11-7.el5_6.1 | RHSA-2011:0257 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 | openSUSE-SU-2024:10538-1 |
Advisories 3
- RHSA-2011:0258 Red Hat Security Advisory: subversion security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10538-1 libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2011:0257 Red Hat Security Advisory: subversion security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- subversion-walk-dos(64472) vdb-entry
- [oss-security] 20110104 Re: CVE request for subversion mailing-list
- ADV-2011-0103 vdb-entry
- 42969 third-party-advisory
- ADV-2011-0264 vdb-entry
- 42780 third-party-advisory
- http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES
- [oss-security] 20110105 Re: CVE request for subversion mailing-list
- [oss-security] 20110103 Re: CVE request for subversion mailing-list
- SUSE-SR:2011:005 vendor-advisory
- 43346 third-party-advisory
- 1024934 vdb-entry
- 43115 third-party-advisory
- FEDORA-2011-0099 vendor-advisory
- ADV-2011-0015 vdb-entry
- [oss-security] 20110102 CVE request for subversion mailing-list
- [www-announce] 20101124 Apache Subversion 1.6.15 Released mailing-list
- RHSA-2011:0258 vendor-advisory
- RHSA-2011:0257 vendor-advisory
- MDVSA-2011:006 vendor-advisory
- [oss-security] 20110104 Re: CVE request for subversion mailing-list
- USN-1053-1 vendor-advisory
- http://svn.apache.org/viewvc?view=revision&revision=1033166
- 45655 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=667407
- 43139 third-party-advisory
- [subversion-users] 20101104 apache coredump in mod_dav_svn mailing-list
- ADV-2011-0162 vdb-entry