Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.8.16:*:*:*:*:*:*:*

part: a version: 1.8.16 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.497036
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.497037
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.497039
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.497040
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.497041
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.497043
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.497044
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.497045

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8734 vulnerable 2026-06-08 05:08:14.716433 Details available
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Published: 2017-10-16T13:00:00.000Z
Updated: 2024-09-16T20:01:52.257Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.