Read the docs
TI-2022-08026 Aliases CVE-2022-24070GHSA-c3j6-9rv7-vmqq

Apache Subversion mod_dav_svn is vulnerable to memory corruption

Priority MEDIUM 44CWE-416Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

Why it matters now

EPSS 0.08869 95th percentileScored 2026-11-07
Fix Fixed Red Hat: 7 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Subversion1.10.0 to 1.14.1—No fix listedCNA
  • Apache Subversion VendorApache Affected 1.10.0 to 1.14.1 Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*1.10.0 to before 1.10.8; 1.14.0 to before 1.14.2VulnerableApache
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*35VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*36VulnerableFedoraproject
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*12.0 to before 12.5VulnerableApple
  • cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:* Versions 1.10.0 to before 1.10.8; 1.14.0 to before 1.14.2 Vulnerable ·Apache
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* Versions 35 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions 12.0 to before 12.5 Vulnerable ·Apple

Remediation

Red Hat 7 advisories

  • RHSA-2022:4941 Released 2022-06-08 · Red Hat rating Important
    subversion:1.14 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.aarch64::subversion:1.14, libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.ppc64le::subversion:1.14, libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.s390x::subversion:1.14 +41
  • RHSA-2022:4722 Released 2022-05-24 · Red Hat rating Important
    subversion:1.14 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.4) libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.aarch64::subversion:1.14, libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.ppc64le::subversion:1.14, libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.s390x::subversion:1.14 +41
  • RHSA-2022:4591 Released 2022-05-18 · Red Hat rating Important
    subversion security update
    • Red Hat Enterprise Linux AppStream (v. 9) mod_dav_svn-1.14.1-5.el9_0, python3-subversion-1.14.1-5.el9_0, subversion-1.14.1-5.el9_0 +5
Show 4 more Red Hat advisories
  • RHSA-2022:2236 Released 2022-05-12 · Red Hat rating Important
    subversion:1.10 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 8.2) libserf-1.3.9-9.module+el8.2.0+9887+08558108.aarch64::subversion:1.10, libserf-1.3.9-9.module+el8.2.0+9887+08558108.ppc64le::subversion:1.10, libserf-1.3.9-9.module+el8.2.0+9887+08558108.s390x::subversion:1.10 +37
  • RHSA-2022:2234 Released 2022-05-12 · Red Hat rating Important
    subversion:1.10 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libserf-1.3.9-9.module+el8.3.0+6671+2675c974.aarch64::subversion:1.10, libserf-1.3.9-9.module+el8.3.0+6671+2675c974.ppc64le::subversion:1.10, libserf-1.3.9-9.module+el8.3.0+6671+2675c974.s390x::subversion:1.10 +37
  • RHSA-2022:2237 Released 2022-05-12 · Red Hat rating Important
    subversion:1.10 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) libserf-1.3.9-9.module+el8.1.0+9889+0a9c19c4.ppc64le::subversion:1.10, libserf-1.3.9-9.module+el8.1.0+9889+0a9c19c4.src::subversion:1.10, libserf-1.3.9-9.module+el8.1.0+9889+0a9c19c4.x86_64::subversion:1.10 +19
  • RHSA-2022:2222 Released 2022-05-11 · Red Hat rating Important
    subversion:1.10 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.4) libserf-1.3.9-9.module+el8.3.0+6671+2675c974.aarch64::subversion:1.10, libserf-1.3.9-9.module+el8.3.0+6671+2675c974.ppc64le::subversion:1.10, libserf-1.3.9-9.module+el8.3.0+6671+2675c974.s390x::subversion:1.10 +37

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Apache Subversion — FEDORA-2022-2af658b090

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2021-09620 Information disclosure in Apache SubversionPriority LOW 25
    Show all 2 records → Advisory →
  • Advisory ·

    Apache Subversion — FEDORA-2022-13cc09ecf2

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2021-09620 Information disclosure in Apache SubversionPriority LOW 25
    Show all 2 records → Advisory →
Show 1 more group
  • Advisory ·

    Apache Subversion — DSA-5119

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2021-09620 Information disclosure in Apache SubversionPriority LOW 25
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2022:2234, RHSA-2022:4941
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2022:4591
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2022:2237
Red Hat Enterprise Linux AppStream EUS (v. 8.2)Fixed RHSA-2022:2236
Red Hat Enterprise Linux AppStream EUS (v.8.4)Fixed RHSA-2022:2222, RHSA-2022:4722
Not affected: 2 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-24070
  2. 2026-10-03 Alias added: GHSA-c3j6-9rv7-vmqq

References

Advisory 8

  • TI-2015-04418 Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache… CVSS 3.0HIGH 8.6
  • TI-2018-08457 Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will… CVSS 3.1HIGH 7.5
  • TI-2020-13273 Remote unauthenticated denial-of-service in Subversion mod_authz_svn CVSS 3.1HIGH 7.5
  • TI-2017-07180 Improper input validation in Apache Subversion CVSS 3.0CRITICAL 9.8
  • TI-2015-04497 Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before… CVSS 3.0HIGH 7.6
  • TI-2013-01858 contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote… CVSS 2.0HIGH 7.1
See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences