Description
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | subversion | 1.6.12dfsg-3 | — |
| Debian 13 | subversion | 1.6.12dfsg-3 | — |
| Debian 12 | subversion | 1.6.12dfsg-3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | subversion +8 | 1.6.11-2.el6_0.2 | RHSA-2011:0258 |
| RHEL 5 | subversion +5 | 1.6.11-7.el5_6.1 | RHSA-2011:0257 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 | openSUSE-SU-2024:10538-1 |
Advisories 3
- RHSA-2011:0258 Red Hat Security Advisory: subversion security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10538-1 libsvn_auth_gnome_keyring-1-0-1.9.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2011:0257 Red Hat Security Advisory: subversion security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- [oss-security] 20110104 Re: CVE request for subversion mailing-list
- ADV-2011-0103 vdb-entry
- subversion-blameg-dos(64473) vdb-entry
- 42969 third-party-advisory
- [dev] 20101104 "svn blame -g" causing svnserve to hang & mem usage to hit 2GB mailing-list
- ADV-2011-0264 vdb-entry
- http://svn.apache.org/viewvc?view=revision&revision=1032808
- 42780 third-party-advisory
- http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES
- [oss-security] 20110105 Re: CVE request for subversion mailing-list
- SUSE-SR:2011:005 vendor-advisory
- 43346 third-party-advisory
- 43115 third-party-advisory
- FEDORA-2011-0099 vendor-advisory
- ADV-2011-0015 vdb-entry
- [oss-security] 20110102 CVE request for subversion mailing-list
- [www-announce] 20101124 Apache Subversion 1.6.15 Released mailing-list
- RHSA-2011:0258 vendor-advisory
- RHSA-2011:0257 vendor-advisory
- [subversion-users] 20101104 svnserve.exe (Win32) using 2GB of memory and then crashing? mailing-list
- MDVSA-2011:006 vendor-advisory
- [oss-security] 20110104 Re: CVE request for subversion mailing-list
- USN-1053-1 vendor-advisory
- 45655 vdb-entry
- 43139 third-party-advisory
- 1024935 vdb-entry
- ADV-2011-0162 vdb-entry