Vulnerability in Apache Subversion
CVE-2011-0715
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
EPSS: 0.063 (92.9th percentile) — read the EPSS interpretation.
Affected products
- Apache Subversion — versions 0.6, 0.7, 0.8
- N/a — versions n/a
Public proof-of-concept exploits
References
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
- secalert@redhat.com (signature, x_refsource_OVAL, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2011-0715?
- CVE-2011-0715 is a vulnerability in Apache Subversion. Published 2011-03-11.
- Is CVE-2011-0715 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.