CVE-2015-0251
Fixed in a distro release EPSS 8%
The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
Products: apache subversion, opensuse, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, oracle solaris, apple xcode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.8.10-6 |
| Debian 13 | subversion | 1.8.10-6 |
| Debian 14 | subversion | 1.8.10-6 |
| Debian 6.0 | subversion | 1.6.12dfsg-7+deb6u2 |
| Debian 7 | subversion | 1.6.17dfsg-4+deb7u9 |
| Red Hat Enterprise Linux 6 | mod_dav_svn | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-debuginfo | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-devel | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-gnome | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-javahl | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-kde | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-perl | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-ruby | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 6 | subversion-svn2cl | 0:1.6.11-15.el6_7 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | mod_dav_svn | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-debuginfo | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-devel | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-gnome | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-javahl | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-kde | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-libs | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-perl | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-python | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.el7_1.1 |
| Red Hat Enterprise Linux 7 | subversion-ruby | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | subversion-tools | 0:1.7.14-7.el7_1.1 |
| SUSE Linux Enterprise Software Development Kit 12 | subversion | 1.8.10-12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | subversion | 1.8.19-25.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | subversion | 1.8.19-25.3.1 |
| Ubuntu 14.04 LTS | subversion | 1.8.8-1ubuntu3.2 |
| openSUSE Tumbleweed | subversion | 1.9.5-1.1 |