In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversions svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Subversion | Apache | * | 1.9.10 (including) |
| Subversion | Apache | 1.10.0 (including) | 1.10.4 (including) |
| Subversion | Apache | 1.11.0 (including) | 1.11.1 (including) |
| Subversion | Apache | 1.12.0 (including) | 1.12.0 (including) |
| Red Hat Enterprise Linux 8 | RedHat | subversion:1.10-8000020190807153138.a27fc728 | * |
| Subversion | Ubuntu | bionic | * |
| Subversion | Ubuntu | disco | * |
| Subversion | Ubuntu | esm-apps/bionic | * |
| Subversion | Ubuntu | esm-infra/xenial | * |
| Subversion | Ubuntu | trusty | * |
| Subversion | Ubuntu | upstream | * |
| Subversion | Ubuntu | xenial | * |