{"id":"CVE-2022-24070","summary":"Apache Subversion mod_dav_svn is vulnerable to memory corruption","details":"Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.","aliases":["BIT-subversion-2022-24070"],"modified":"2026-05-15T11:53:30.244271010Z","published":"2022-04-12T17:50:14Z","related":["ALSA-2022:2234","SUSE-SU-2022:1161-1","SUSE-SU-2022:1162-1","SUSE-SU-2022:1483-1","openSUSE-SU-2024:12007-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24070.json","unresolved_ranges":[{"extracted_events":[{"last_affected":"1.10.0 to 1.14.1"}],"source":"AFFECTED_FIELD"},{"extracted_events":[{"introduced":"1.10.0"},{"fixed":"1.14.1"}],"source":"DESCRIPTION"}],"cwe_ids":["CWE-416"],"cna_assigner":"apache"},"references":[{"type":"WEB","url":"https://cwiki.apache.org/confluence/display/HTTPD/ModuleLife"},{"type":"WEB","url":"https://issues.apache.org/jira/browse/SVN-4880"},{"type":"WEB","url":"https://support.apple.com/kb/HT213345"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24070.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZ4ARNGLMGYBKYDX2B7DRBNMF6EH3A6R/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJPMCWCGWBN3QWCDVILWQWPC75RR67LT/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24070"},{"type":"ADVISORY","url":"https://www.debian.org/security/2022/dsa-5119"},{"type":"REPORT","url":"https://bz.apache.org/bugzilla/show_bug.cgi?id=65861"},{"type":"ARTICLE","url":"http://seclists.org/fulldisclosure/2022/Jul/18"}],"schema_version":"1.7.5"}