CVE-2011-0715

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-11 · updated 2026-06-16

Description

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.

Affected products

Apache Software Foundation Apache Subversion: through 1.6.15; 0.6, 0.7, 0.8, 0.9, 0.10.0, 0.10.1 (+105)

References

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056072.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056736.html
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://secunia.com/advisories/43583
http://secunia.com/advisories/43603
http://secunia.com/advisories/43672
http://secunia.com/advisories/43794
http://securitytracker.com/id?1025161
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.479953
http://subversion.apache.org/security/CVE-2011-0715-advisory.txt

Get alerted when CVE-2011-0715 or the next vulnerability affects your stack