CVE-2013-1845: The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows...

Security readout for executives and security teams

This issue can let a logged-in Subversion user make an Apache-hosted SVN service consume excessive memory and become unavailable. It is not described as code execution or data theft. Business impact is mainly repository outage risk for organizations still running the affected legacy Subversion versions through Apache mod_dav_svn. Exposure is most likely on legacy Apache HTTPD servers publishing Subversion repositories through mod_dav_svn, especially versions 1.6.20 or older and 1.7.0 through 1.7.8. Systems not using mod_dav_svn, or not offering authenticated remote SVN access, are less likely exposed. Prioritize remediation if SVN repositories remain business-critical or internet-accessible to many users. The issue is old and authenticated, but unpatched legacy source-control infrastructure can still disrupt engineering, release, or operations workflows. Mitigation focus: Upgrade Apache Subversion to 1.6.21, 1.7.9, or a vendor-fixed package.; Apply relevant Red Hat, Ubuntu, openSUSE, or Mandriva security updates where applicable.; Restrict authenticated SVN access to trusted users until patched..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.