| Package | Affected versions | Patched versions |
|---|---|---|
| subversion | ≥ 1.5.0, ≤ 1.5.8≥ 1.6.0, < 1.6.17 | 1.6.17 |
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free