CVE-2018-11782

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
apachesubversion
𝑥
≤ 1.9.10
apachesubversion
1.10.0 ≤
𝑥
≤ 1.10.4
apachesubversion
1.11.0 ≤
𝑥
≤ 1.11.1
apachesubversion
1.12.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
subversion
bookworm
1.14.2-4
fixed
bullseye
1.14.1-3+deb11u1
fixed
bullseye (security)
1.14.1-3+deb11u1
fixed
sid
1.14.4-2
fixed
trixie
1.14.4-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
subversion
bionic
Fixed 1.9.7-4ubuntu1.1
released
disco
ignored
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
trusty
dne
xenial
Fixed 1.9.3-2ubuntu1.3
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
subversion
suse enterprise desktop 15
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP1
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP2
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP3
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise sap 15
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP1
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP2
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP3
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise server 15
1.10.6-3.6.2
fixed
suse enterprise server 15 SP1
1.10.6-3.6.2
fixed
suse enterprise server 15 SP2
1.10.6-3.6.2
fixed
suse enterprise server 15 SP3
1.10.6-3.6.2
fixed
suse enterprise server 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP7
1.14.1-150400.5.3.1
fixed
subversion-bash-completion
suse enterprise desktop 15
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP1
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP2
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP3
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise sap 15
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP1
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP2
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP3
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise server 15
1.10.6-3.6.2
fixed
suse enterprise server 15 SP1
1.10.6-3.6.2
fixed
suse enterprise server 15 SP2
1.10.6-3.6.2
fixed
suse enterprise server 15 SP3
1.10.6-3.6.2
fixed
suse enterprise server 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP7
1.14.1-150400.5.3.1
fixed
subversion-devel
suse enterprise desktop 15
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP1
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP2
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP3
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise sap 15
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP1
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP2
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP3
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise server 15
1.10.6-3.6.2
fixed
suse enterprise server 15 SP1
1.10.6-3.6.2
fixed
suse enterprise server 15 SP2
1.10.6-3.6.2
fixed
suse enterprise server 15 SP3
1.10.6-3.6.2
fixed
suse enterprise server 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP7
1.14.1-150400.5.3.1
fixed
subversion-perl
suse enterprise desktop 15
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP1
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP2
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP3
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise sap 15
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP1
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP2
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP3
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise server 15
1.10.6-3.6.2
fixed
suse enterprise server 15 SP1
1.10.6-3.6.2
fixed
suse enterprise server 15 SP2
1.10.6-3.6.2
fixed
suse enterprise server 15 SP3
1.10.6-3.6.2
fixed
suse enterprise server 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP7
1.14.1-150400.5.3.1
fixed
subversion-python
suse enterprise desktop 15
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP1
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP2
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP3
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise sap 15
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP1
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP2
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP3
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise server 15
1.10.6-3.6.2
fixed
suse enterprise server 15 SP1
1.10.6-3.6.2
fixed
suse enterprise server 15 SP2
1.10.6-3.6.2
fixed
suse enterprise server 15 SP3
1.10.6-3.6.2
fixed
suse enterprise server 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP7
1.14.1-150400.5.3.1
fixed
subversion-tools
suse enterprise desktop 15
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP1
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP2
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP3
1.10.6-3.6.2
fixed
suse enterprise desktop 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise desktop 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise sap 15
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP1
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP2
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP3
1.10.6-3.6.2
fixed
suse enterprise sap 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise sap 15 SP7
1.14.1-150400.5.3.1
fixed
suse enterprise server 15
1.10.6-3.6.2
fixed
suse enterprise server 15 SP1
1.10.6-3.6.2
fixed
suse enterprise server 15 SP2
1.10.6-3.6.2
fixed
suse enterprise server 15 SP3
1.10.6-3.6.2
fixed
suse enterprise server 15 SP4
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP5
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP6
1.14.1-150400.3.8
fixed
suse enterprise server 15 SP7
1.14.1-150400.5.3.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
mod
RHEL 7
0:1.7.14-16.el7
fixed
subversion
RHEL 7
0:1.7.14-16.el7
fixed
subversion-devel
RHEL 7
0:1.7.14-16.el7
fixed
subversion-gnome
RHEL 7
0:1.7.14-16.el7
fixed
subversion-javahl
RHEL 7
0:1.7.14-16.el7
fixed
subversion-kde
RHEL 7
0:1.7.14-16.el7
fixed
subversion-libs
RHEL 7
0:1.7.14-16.el7
fixed
subversion-perl
RHEL 7
0:1.7.14-16.el7
fixed
subversion-python
RHEL 7
0:1.7.14-16.el7
fixed
subversion-ruby
RHEL 7
0:1.7.14-16.el7
fixed
subversion-tools
RHEL 7
0:1.7.14-16.el7
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
mod24_dav_svn
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
mod_dav_svn
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-debuginfo
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-devel
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-gnome
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-javahl
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-libs
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-perl
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-python
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-python26
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
subversion-python27
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
subversion-ruby
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
subversion-tools
Amazon Linux 1
0:1.9.7-1.60.amzn1
fixed
Amazon Linux 2
0:1.7.14-16.amzn2.0.1
fixed
Common Weakness Enumeration
References
http://subversion.apache.org/security/CVE-2018-11782-advisory.txt
http://subversion.apache.org/security/CVE-2018-11782-advisory.txt