Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.3.2:*:*:*:*:*:*:*

part: a version: 1.3.2 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.371815
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.371817
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.371818
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.371819
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.371821
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.371822
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.371823
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.371825

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8108 vulnerable 2026-06-08 05:06:07.602701 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T13:10:50.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3580 vulnerable 2026-06-08 05:05:33.579843 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T10:50:17.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3528 vulnerable 2026-06-08 05:05:33.280864 Details available
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Published: 2014-08-19T18:00:00.000Z
Updated: 2024-08-06T10:50:16.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0715 vulnerable 2026-06-08 04:56:38.772002 Details available
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Published: 2011-03-11T22:00:00.000Z
Updated: 2024-08-06T22:05:52.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4644 vulnerable 2026-06-08 04:56:29.789131 Details available
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Published: 2011-01-07T18:00:00.000Z
Updated: 2024-08-07T03:51:17.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4539 vulnerable 2026-06-08 04:56:29.074453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.