Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.371299
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.371300
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.371302
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.371303
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.371305
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.371306
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.371308
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.371309

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8108 vulnerable 2026-06-08 05:06:07.593375 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T13:10:50.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3580 vulnerable 2026-06-08 05:05:33.579531 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T10:50:17.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3528 vulnerable 2026-06-08 05:05:33.271690 Details available
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Published: 2014-08-19T18:00:00.000Z
Updated: 2024-08-06T10:50:16.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0715 vulnerable 2026-06-08 04:56:38.771589 Details available
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Published: 2011-03-11T22:00:00.000Z
Updated: 2024-08-06T22:05:52.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4644 vulnerable 2026-06-08 04:56:29.788815 Details available
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Published: 2011-01-07T18:00:00.000Z
Updated: 2024-08-07T03:51:17.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4539 vulnerable 2026-06-08 04:56:29.063451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.