Read the docs
TI-2009-02301 Aliases CVE-2009-2411GHSA-vmfg-4frj-fmfg

Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and…

Priority MEDIUM 45CWE-189Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-189 and the CVSS impact.

Summary

Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.

Why it matters now

EPSS 0.05112 92nd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:a:subversion:subversion:*:*:*:*:*:*:*:*up to 1.5.6VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.22.1:*:*:*:*:*:*:*0.22.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.23.0:*:*:*:*:*:*:*0.23.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.24.0:*:*:*:*:*:*:*0.24.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.24.1:*:*:*:*:*:*:*0.24.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.24.2:*:*:*:*:*:*:*0.24.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.25.0:*:*:*:*:*:*:*0.25.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.27.0:*:*:*:*:*:*:*0.27.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.28.0:*:*:*:*:*:*:*0.28.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.28.1:*:*:*:*:*:*:*0.28.1VulnerableSubversion
  • cpe:2.3:a:subversion:subversion:*:*:*:*:*:*:*:* Versions up to 1.5.6 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.22.1:*:*:*:*:*:*:* Versions 0.22.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.23.0:*:*:*:*:*:*:* Versions 0.23.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.24.0:*:*:*:*:*:*:* Versions 0.24.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.24.1:*:*:*:*:*:*:* Versions 0.24.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.24.2:*:*:*:*:*:*:* Versions 0.24.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.25.0:*:*:*:*:*:*:* Versions 0.25.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.27.0:*:*:*:*:*:*:* Versions 0.27.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.28.0:*:*:*:*:*:*:* Versions 0.28.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.28.1:*:*:*:*:*:*:* Versions 0.28.1 Vulnerable ·Subversion
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:subversion:subversion:0.28.2:*:*:*:*:*:*:*0.28.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.29.0:*:*:*:*:*:*:*0.29.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.30.0:*:*:*:*:*:*:*0.30.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.31.0:*:*:*:*:*:*:*0.31.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.32.0:*:*:*:*:*:*:*0.32.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.32.1:*:*:*:*:*:*:*0.32.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.33.0:*:*:*:*:*:*:*0.33.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.33.1:*:*:*:*:*:*:*0.33.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.34.0:*:*:*:*:*:*:*0.34.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.35.0:*:*:*:*:*:*:*0.35.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.35.1:*:*:*:*:*:*:*0.35.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.36.0:*:*:*:*:*:*:*0.36.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:0.37.0:*:*:*:*:*:*:*0.37.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*1.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.8:*:*:*:*:*:*:*1.0.8VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.0.9:*:*:*:*:*:*:*1.0.9VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:*1.1.0_rc1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:*1.1.0_rc2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.0_rc3:*:*:*:*:*:*:*1.1.0_rc3VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.3:*:*:*:*:*:*:*1.1.3VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.4.4:*:*:*:*:*:*:*1.4.4VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.5.1:*:*:*:*:*:*:*1.5.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.5.3:*:*:*:*:*:*:*1.5.3VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.5.4:*:*:*:*:*:*:*1.5.4VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.5.5:*:*:*:*:*:*:*1.5.5VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableSubversion
cpe:2.3:a:subversion:subversion:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableSubversion
  • cpe:2.3:a:subversion:subversion:0.28.2:*:*:*:*:*:*:* Versions 0.28.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.29.0:*:*:*:*:*:*:* Versions 0.29.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.30.0:*:*:*:*:*:*:* Versions 0.30.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.31.0:*:*:*:*:*:*:* Versions 0.31.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.32.0:*:*:*:*:*:*:* Versions 0.32.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.32.1:*:*:*:*:*:*:* Versions 0.32.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.33.0:*:*:*:*:*:*:* Versions 0.33.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.33.1:*:*:*:*:*:*:* Versions 0.33.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.34.0:*:*:*:*:*:*:* Versions 0.34.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.35.0:*:*:*:*:*:*:* Versions 0.35.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.35.1:*:*:*:*:*:*:* Versions 0.35.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.36.0:*:*:*:*:*:*:* Versions 0.36.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:0.37.0:*:*:*:*:*:*:* Versions 0.37.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:* Versions 1.1.0_rc1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:* Versions 1.1.0_rc2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.0_rc3:*:*:*:*:*:*:* Versions 1.1.0_rc3 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Subversion
  • cpe:2.3:a:subversion:subversion:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Subversion

Remediation

Red Hat 1 advisory

  • RHSA-2009:1203 Released 2009-08-10 · Red Hat rating Important
    subversion security update
    • Red Hat Enterprise Linux (v. 5 server) mod_dav_svn-1.4.2-4.el5_3.1, mod_dav_svn-1.4.2-4.el5_3.1.i386, mod_dav_svn-1.4.2-4.el5_3.1.ia64 +21
    • Red Hat Enterprise Linux AS version 4 mod_dav_svn-1.1.4-3.el4_8.2, mod_dav_svn-1.1.4-3.el4_8.2.i386, mod_dav_svn-1.1.4-3.el4_8.2.ia64 +13
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mod_dav_svn-1.4.2-4.el5_3.1, mod_dav_svn-1.4.2-4.el5_3.1.i386, subversion-1.4.2-4.el5_3.1 +9
    • Red Hat Enterprise Linux Desktop version 4 mod_dav_svn-1.1.4-3.el4_8.2, mod_dav_svn-1.1.4-3.el4_8.2.i386, subversion-1.1.4-3.el4_8.2 +5
    • Red Hat Enterprise Linux ES version 4 mod_dav_svn-1.1.4-3.el4_8.2, mod_dav_svn-1.1.4-3.el4_8.2.i386, mod_dav_svn-1.1.4-3.el4_8.2.ia64 +9
    • Red Hat Enterprise Linux WS version 4 mod_dav_svn-1.1.4-3.el4_8.2, mod_dav_svn-1.1.4-3.el4_8.2.i386, mod_dav_svn-1.1.4-3.el4_8.2.ia64 +9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2009:1203
Red Hat Enterprise Linux AS version 4Fixed RHSA-2009:1203
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2009:1203
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2009:1203
Red Hat Enterprise Linux ES version 4Fixed RHSA-2009:1203
Red Hat Enterprise Linux WS version 4Fixed RHSA-2009:1203

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2411
  2. 2026-10-03 Alias added: GHSA-vmfg-4frj-fmfg

References

Advisory 8

Other 11

  • TI-2004-00363 Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and… CVSS 2.0HIGH 7.5
  • TI-2004-00377 libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://… CVSS 2.0HIGH 10.0
  • TI-2007-03730 Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN… CVSS 2.0MEDIUM 6.0
  • TI-2004-00690 The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict… CVSS 2.0MEDIUM 5.0
  • TI-2007-02364 Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege… CVSS 2.0LOW 2.1
  • TI-2004-01315 The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences