CVE-2013-1849

Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.x through 1.6.20 Subversion versions 1.7.0 through 1.7.8

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a PROPFIND request for an activity URL.

Recommendations For Subversion versions 1.6.x through 1.6.20, update to a version outside of this range to resolve the issue. For Subversion versions 1.7.0 through 1.7.8, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the mod dav svn module until a patch is available.