CVE-2016-2168: apache subversion
Vulnerability summary
CVE-2016-2168 is a medium (CVSS 6.5) vulnerability in apache subversion. EPSS estimates a 20.69% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 7 · Related 4Timeline
- 05-05-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
20.69%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 20.69% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apache1 product
- subversionEOL≤ 1.8.15 | 1.9.0 | 1.9.1 | 1.9.2 | 1.9.3
Debian1 product
- subversion< 1.9.4-1
Ubuntu1 product
- subversion< 1.8.8-1ubuntu3.3 | < 1.9.3-2ubuntu1.1
3 vendors · 3 products
References
17 links- lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.htmlVendor AdvisoryX Refsource FEDORA
- www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496Vendor AdvisoryX Refsource SLACKWARE
Show all 17 references
- www.oracle.com/security-alerts/cpuoct2020.htmlX Refsource MISC