VULNERABILITY INTELLIGENCE

CVE-2014-3580

CVSS score5 MEDIUM
EPSS probability11.12%
CISA KEVNot currently listed
Published2014-12-18
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

Primary references