Evil-DB LogoEvil-DB
← All CVEs

CVE-2013-1847

medium · 5

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.

5
CVSS
51.4%
EPSS (exploit prob.)
99th
EPSS percentile
2013-05-02
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
apachesubversion1.6.0
apachesubversion1.6.1
apachesubversion1.6.2
apachesubversion1.6.3
apachesubversion1.6.4
apachesubversion1.6.5
apachesubversion1.6.6
apachesubversion1.6.7
apachesubversion1.6.8
apachesubversion1.6.9
apachesubversion1.6.10
apachesubversion1.6.11
apachesubversion1.6.12
apachesubversion1.6.13
apachesubversion1.6.14
apachesubversion1.6.15
apachesubversion1.6.16
apachesubversion1.6.17
apachesubversion1.6.18
apachesubversion1.6.19
apachesubversion1.6.20
apachesubversion1.7.0
apachesubversion1.7.1
apachesubversion1.7.2
apachesubversion1.7.3
apachesubversion1.7.4
apachesubversion1.7.5
apachesubversion1.7.6
apachesubversion1.7.7
apachesubversion1.7.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-1847