Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.1.3:*:*:*:*:*:*:*

part: a version: 1.1.3 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.371619
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.371620
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.371622
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.371623
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.371624
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.371626
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.371627
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.371628

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8108 vulnerable 2026-06-08 05:06:07.598755 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T13:10:50.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3580 vulnerable 2026-06-08 05:05:33.579714 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T10:50:17.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3528 vulnerable 2026-06-08 05:05:33.277007 Details available
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Published: 2014-08-19T18:00:00.000Z
Updated: 2024-08-06T10:50:16.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0715 vulnerable 2026-06-08 04:56:38.771867 Details available
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Published: 2011-03-11T22:00:00.000Z
Updated: 2024-08-06T22:05:52.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4644 vulnerable 2026-06-08 04:56:29.788998 Details available
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Published: 2011-01-07T18:00:00.000Z
Updated: 2024-08-07T03:51:17.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4539 vulnerable 2026-06-08 04:56:29.069728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.