CVE-2020-17525: vulnerability in Apache Subversion
Remote unauthenticated denial-of-service in Subversion mod_authz_svn
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 40%
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
Affected products
Apache Software Foundation · Apache SubversionRelated CVEs — Apache Subversion
In the same product, most dangerous first.
CVE-2018-11803—CVE-2018-11803EPSS 58.5%CVE-2017-9800—CVE-2017-9800EPSS 18.9%CVE-2022-24070—Apache Subversion mod_dav_svn is vulnerable to memory corruptionEPSS 9.5%CVE-2016-8734—CVE-2016-8734EPSS 6.4%CVE-2021-28544—Apache Subversion SVN authz protected copyfrom paths regressionEPSS 2.8%CVE-2024-46901LOWApache Subversion: mod_dav_svn denial-of-service via control characters in pathsEPSS 1.9%