Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.0.6:*:*:*:*:*:*:*

part: a version: 1.0.6 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.371343
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.371344
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.371346
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.371347
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.371348
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.371350
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.371351
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.371352

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8108 vulnerable 2026-06-08 05:06:07.595323 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T13:10:50.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3580 vulnerable 2026-06-08 05:05:33.579596 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T10:50:17.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3528 vulnerable 2026-06-08 05:05:33.273653 Details available
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Published: 2014-08-19T18:00:00.000Z
Updated: 2024-08-06T10:50:16.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0715 vulnerable 2026-06-08 04:56:38.771744 Details available
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Published: 2011-03-11T22:00:00.000Z
Updated: 2024-08-06T22:05:52.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4644 vulnerable 2026-06-08 04:56:29.788882 Details available
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Published: 2011-01-07T18:00:00.000Z
Updated: 2024-08-07T03:51:17.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4539 vulnerable 2026-06-08 04:56:29.066033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.