CVE-2022-24070CWE-416

Apache Subversion mod_dav_svn is vulnerable to memory corruption

published April 12, 2022

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09473 · 95.4th percentile
Weakness
CWE-416 · Use After Free
Published
2022-04-12T17:50Z
EPSS history
Timeline
  • 12 APR 17:50Z
    Apache Subversion mod_dav_svn is vulnerable to memory corruption
    cvelistv5