Vulnerability · Published Mar 17, 2021 · Assigned by apache
CVE-2020-17525Remote unauthenticated denial-of-service in Subversion mod_authz_svn
High 7.5
In plain English
A high-severity null pointer dereference in Apache Subversion from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 40.1% (higher than 99% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)40.1%top 1.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libserf | 1.3.9-9.module_el8.6.0+2912+eb1cdf5a | ALSA-2021:0507 |
| AlmaLinux:8 | libserf | 1.3.9-9.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | libserf | 1.3.9-9.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | mod_dav_svn | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | mod_dav_svn | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | mod_dav_svn | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | subversion | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-devel | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-devel | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-devel | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-gnome | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-gnome | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-gnome | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-javahl | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-libs | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-libs | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-libs | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-perl | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-perl | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-perl | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-tools | 1.10.2-4.module_el8.5.0+73+aa7e29ed | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-tools | 1.10.2-4.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | subversion-tools | 1.10.2-4.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | utf8proc | 2.1.1-5.module_el8.4.0+2266+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | utf8proc | 2.1.1-5.module_el8.3.0+2053+ac338b6d | ALSA-2021:0507 |
| AlmaLinux:8 | utf8proc | 2.1.1-5.module_el8.6.0+2912+eb1cdf5a | ALSA-2021:0507 |
| Alpine:v3.20 | subversion | 1.14.1-r0 | ALPINE-CVE-2020-17525 |
| Alpine:v3.21 | subversion | 1.14.1-r0 | ALPINE-CVE-2020-17525 |
| Alpine:v3.22 | subversion | 1.14.1-r0 | ALPINE-CVE-2020-17525 |
| Alpine:v3.23 | subversion | 1.14.1-r0 | ALPINE-CVE-2020-17525 |
| Alpine:v3.24 | subversion | 1.14.1-r0 | ALPINE-CVE-2020-17525 |
| Debian:12 | subversion | 1.14.1-1 | DEBIAN-CVE-2020-17525 |
| Debian:13 | subversion | 1.14.1-1 | DEBIAN-CVE-2020-17525 |
| Debian:14 | subversion | 1.14.1-1 | DEBIAN-CVE-2020-17525 |
| Rocky Linux:8 | libserf | 0:1.3.9-9.module+el8.4.0+407+38733e5a | RLSA-2021:0507 |
| Rocky Linux:8 | libserf | 0:1.3.9-9.module+el8.7.0+1065+42200b2e | RLSA-2021:0507 |
| Rocky Linux:8 | subversion | 0:1.10.2-4.module+el8.4.0+407+38733e5a | RLSA-2021:0507 |
| Rocky Linux:8 | utf8proc | 0:2.1.1-5.module+el8.4.0+407+38733e5a | RLSA-2021:0507 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Subversion | mod_authz_svn – before 1.14.1 |
Weakness: CWE-476
References
- https://subversion.apache.org/security/CVE-2020-17525-advisory.txt x_refsource_MISC
- [debian-lts-announce] 20210504 [SECURITY] [DLA 2646-1] subversion security update mailing-list, x_refsource_MLIST