BIT-subversion-2022-24070

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/subversion/BIT-subversion-2022-24070.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-subversion-2022-24070
Aliases
Published
2024-03-06T11:05:35Z
Modified
2025-05-20T10:02:07Z
Summary
Apache Subversion mod_dav_svn is vulnerable to memory corruption
Details

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

Database specific 
{
    "cpes":  [
        "cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*"
    ],
    "severity":  "High"
}
References

Affected packages

Bitnami / subversion

Package

Name
subversion
Purl
pkg:bitnami/subversion

Severity

  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
1.10.0
Fixed
1.10.8
Introduced
1.14.0
Fixed
1.14.2

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/subversion/BIT-subversion-2022-24070.json"