CVE-2020-17525: apache software foundation apache subversion NULL Pointer Dereference

CVSS: 7.5v3.1HighModified

AliasesALPINE-CVE-2020-17525MGASA-2021-0091SUSE-SU-2021:0424-1+10 more

Published 17-03-2021Last modified 13-02-2025

Vulnerability summary

CVE-2020-17525 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in apache software foundation apache subversion. EPSS estimates a 40.08% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

48/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

40.08%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 2 · Related 2

OPENSUSE-SU-2024:11412-1 USN-5445-1

Timeline

17-03-2021
PublishedVulnerability first disclosed.
13-02-2025
Last modifiedVulnerability information updated.

Description

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

CVSS metrics

6 scores · 5 sources · 2 versions

v3.17.5v2.04.3

EPSS trend

Probability

40.08%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 40.08% on 18-09-2026

18-09-202618-10-2026

EPSS score

40.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (subversion.apache.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Redhat22 products

libserf< 0:1.3.9-9.module+el8.3.0+6671+2675c974 | < 0:1.3.9-9.module+el8.2.0+9887+08558108 | < 0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
libserf-debuginfo< 0:1.3.9-9.module+el8.3.0+6671+2675c974 | < 0:1.3.9-9.module+el8.2.0+9887+08558108 | < 0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
libserf-debugsource< 0:1.3.9-9.module+el8.3.0+6671+2675c974 | < 0:1.3.9-9.module+el8.2.0+9887+08558108 | < 0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
mod_dav_svn< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
mod_dav_svn-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1

subversion< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-debugsource< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-devel< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-devel-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-gnome< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-gnome-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-javahl< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-libs< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-libs-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-perl< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-perl-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-tools< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
subversion-tools-debuginfo< 0:1.10.2-4.module+el8.3.0+9886+ac338b6d | < 0:1.10.2-2.module+el8.2.0+9887+08558108.1 | < 0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
utf8proc< 0:2.1.1-5.module+el8.3.0+6671+2675c974 | < 0:2.1.1-5.module+el8.2.0+9887+08558108 | < 0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
utf8proc-debuginfo< 0:2.1.1-5.module+el8.3.0+6671+2675c974 | < 0:2.1.1-5.module+el8.2.0+9887+08558108 | < 0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
utf8proc-debugsource< 0:2.1.1-5.module+el8.3.0+6671+2675c974 | < 0:2.1.1-5.module+el8.2.0+9887+08558108 | < 0:2.1.1-5.module+el8.1.0+9889+0a9c19c4

Show all 22

Suse17 products

subversion&distro=SUSE Enterprise Storage 6< 1.10.6-3.15.1
subversion&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.10.6-3.15.1
subversion&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.10.6-3.15.1
subversion&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 1.10.6-3.15.1
subversion&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 1.10.6-3.15.1

Show all 17

Debian2 products

subversion< 1.14.1-1 | < 1.10.4-1+deb10u2 | < 1.9.5-1+deb9u6
debian_linuxEOL9.0

Alpine1 product

subversion≥ 1.9.0, < 1.12.2-r1 | ≥ 1.9.0, < 1.12.2-r2 | ≥ 1.9.0, < 1.13.0-r3 | ≥ 1.9.0, < 1.14.1-r0

Apache1 product

subversion≥ 1.9.0, < 1.10.7 | ≥ 1.11.0, < 1.14.1

Apache software foundation1 product

apache subversion≥ mod_authz_svn, < 1.14.1

Mageia1 product

subversion< 1.10.7-1.mga7

Opensuse1 product

subversion&distro=openSUSE Leap 15.2< 1.10.6-lp152.2.9.1

Ubuntu1 product

subversion< 1.9.7-4ubuntu1.1 | < 1.13.0-3ubuntu0.2 | < 1.9.3-2ubuntu1.3+esm1

9 vendors · 47 products

References

25 links

subversion.apache.org/security/CVE-2020-17525-advisory.txtX Refsource MISCAdvisoryARTICLEExploitPatchVendor Advisory
lists.debian.org/debian-lts-announce/2021/05/msg00000.htmlMailing ListX Refsource MLISTThird Party Advisory
security.alpinelinux.org/vuln/CVE-2020-17525Advisory
advisories.mageia.org/MGASA-2021-0091.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=28348REPORT
www.suse.com/support/update/announcement/2021/suse-su-20210424-1/Advisory
bugzilla.suse.com/1181687REPORT
www.suse.com/security/cve/CVE-2020-17525WEB
www.suse.com/support/update/announcement/2021/suse-su-20210425-1/Advisory
access.redhat.com/errata/RHSA-2021:0507Advisory

Show all 25 references

access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1922303REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0507.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-17525REPORT
www.cve.org/CVERecord?id=CVE-2020-17525AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2020-17525AdvisoryOval
access.redhat.com/errata/RHSA-2021:0508Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0508.jsonAdvisory
access.redhat.com/errata/RHSA-2021:0509Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0509.jsonAdvisory
ubuntu.com/security/CVE-2020-17525REPORT
ubuntu.com/security/notices/USN-5322-1Advisory
ubuntu.com/security/notices/USN-5445-1Advisory
security-tracker.debian.org/tracker/CVE-2020-17525Advisory
lists.opensuse.org/archives/…Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities