Vulnerability · Published Apr 12, 2022 · Assigned by apache
CVE-2022-24070Apache Subversion mod_dav_svn is vulnerable to memory corruption
High 7.5
In plain English
A high-severity use-after-free in Apache Subversion from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 9.5% (higher than 95% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)9.5%top 4.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libserf | 1.3.9-9.module_el8.6.0+2912+eb1cdf5a | ALSA-2022:2234 |
| AlmaLinux:8 | libserf | 1.3.9-9.module_el8.4.0+2266+ac338b6d | ALSA-2022:2234 |
| AlmaLinux:8 | libserf | 1.3.9-9.module_el8.3.0+2053+ac338b6d | ALSA-2022:2234 |
| AlmaLinux:8 | mod_dav_svn | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | mod_dav_svn | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | subversion | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-devel | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-devel | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-gnome | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-gnome | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-javahl | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-javahl | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-libs | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-libs | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-perl | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-perl | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-tools | 1.10.2-5.module_el8.6.0+2897+d2f1747f | ALSA-2022:2234 |
| AlmaLinux:8 | subversion-tools | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | ALSA-2022:2234 |
| AlmaLinux:8 | utf8proc | 2.1.1-5.module_el8.6.0+2912+eb1cdf5a | ALSA-2022:2234 |
| AlmaLinux:8 | utf8proc | 2.1.1-5.module_el8.4.0+2266+ac338b6d | ALSA-2022:2234 |
| AlmaLinux:8 | utf8proc | 2.1.1-5.module_el8.3.0+2053+ac338b6d | ALSA-2022:2234 |
| Alpine:v3.20 | subversion | 1.14.2-r0 | ALPINE-CVE-2022-24070 |
| Alpine:v3.21 | subversion | 1.14.2-r0 | ALPINE-CVE-2022-24070 |
| Alpine:v3.22 | subversion | 1.14.2-r0 | ALPINE-CVE-2022-24070 |
| Alpine:v3.23 | subversion | 1.14.2-r0 | ALPINE-CVE-2022-24070 |
| Alpine:v3.24 | subversion | 1.14.2-r0 | ALPINE-CVE-2022-24070 |
| Debian:12 | subversion | 1.14.2-1 | DEBIAN-CVE-2022-24070 |
| Debian:13 | subversion | 1.14.2-1 | DEBIAN-CVE-2022-24070 |
| Debian:14 | subversion | 1.14.2-1 | DEBIAN-CVE-2022-24070 |
| Rocky Linux:8 | libserf | 0:1.3.9-9.module+el8.4.0+407+38733e5a | RLSA-2022:4941 |
| Rocky Linux:8 | libserf | 0:1.3.9-9.module+el8.4.0+407+38733e5a | RLSA-2022:2234 |
| Rocky Linux:8 | libserf | 0:1.3.9-9.module+el8.7.0+1065+42200b2e | RLSA-2022:2234 |
| Rocky Linux:8 | libserf | 0:1.3.9-9.module+el8.7.0+1065+42200b2e | RLSA-2022:4941 |
| Rocky Linux:8 | subversion | 0:1.14.1-2.module+el8.7.0+1066+f8abeb19 | RLSA-2022:4941 |
| Rocky Linux:8 | subversion | 0:1.14.1-2.module+el8.6.0+981+332af5e1 | RLSA-2022:4941 |
| Rocky Linux:8 | subversion | 0:1.10.2-5.module+el8.6.0+974+3d7a8821 | RLSA-2022:2234 |
| Rocky Linux:8 | subversion | 0:1.10.2-5.module+el8.7.0+1065+42200b2e | RLSA-2022:2234 |
| Rocky Linux:9 | subversion | 0:1.14.1-5.el9_0 | RLSA-2022:4591 |
| Rocky Linux:8 | utf8proc | 0:2.1.1-5.module+el8.4.0+407+38733e5a | RLSA-2022:4941 |
| Rocky Linux:8 | utf8proc | 0:2.1.1-5.module+el8.4.0+407+38733e5a | RLSA-2022:2234 |
| Ubuntu:22.04:LTS | subversion | 1.14.1-3ubuntu0.22.04.1 | USN-5450-1 |
| Ubuntu:22.04:LTS | subversion | 1.14.1-3ubuntu0.22.04.1 | UBUNTU-CVE-2022-24070 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Subversion | 1.10.0 to 1.14.1 |
Weakness: CWE-416
References
- https://issues.apache.org/jira/browse/SVN-4880 x_refsource_MISC
- https://bz.apache.org/bugzilla/show_bug.cgi?id=65861 x_refsource_MISC
- https://cwiki.apache.org/confluence/display/HTTPD/ModuleLife x_refsource_MISC
- DSA-5119 vendor-advisory, x_refsource_DEBIAN
- FEDORA-2022-13cc09ecf2 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-2af658b090 vendor-advisory, x_refsource_FEDORA
- https://support.apple.com/kb/HT213345 x_refsource_CONFIRM
- 20220721 APPLE-SA-2022-07-20-2 macOS Monterey 12.5 mailing-list, x_refsource_FULLDISC