Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-4558 Details

Description

The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html	CVE
http://osvdb.org/100363	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=1033431	CVE
https://github.com/apache/subversion/commit/2c77c43e4255555f3b79f761f0d141393a3856cc	CVE
https://github.com/apache/subversion/commit/647e3f8365a74831bb915f63793b63e31fae062d	CVE
http://subversion.apache.org/security/CVE-2013-4558-advisory.txt	CVE	PatchVendor Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html	[email protected]
http://osvdb.org/100363	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1033431	[email protected]
https://github.com/apache/subversion/commit/2c77c43e4255555f3b79f761f0d141393a3856cc	[email protected]
https://github.com/apache/subversion/commit/647e3f8365a74831bb915f63793b63e31fae062d	[email protected]
http://subversion.apache.org/security/CVE-2013-4558-advisory.txt	[email protected]	PatchVendor Advisory

see all 14 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
apache mod dav svn	All versions
CPE cpe:2.3:a:apache:mod_dav_svn:-:::::::* Remediation No remediation found in references.
apache subversion	1.7.11 1.7.12 1.7.13 1.8.1 1.8.2
CPE cpe:2.3:a:apache:subversion:1.7.11:::::::* cpe:2.3:a:apache:subversion:1.7.12:::::::* cpe:2.3:a:apache:subversion:1.7.13:::::::* cpe:2.3:a:apache:subversion:1.8.1:::::::* cpe:2.3:a:apache:subversion:1.8.2:::::::* cpe:2.3:a:apache:subversion:1.8.3:::::::* cpe:2.3:a:apache:subversion:1.8.4:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Mar 28, 2024	CVE Modified	[email protected]
Dec 9, 2013	Initial Analysis	[email protected]