# CVE-2022-24070: ruby-svn: Subversion's mod_dav_svn is vulnerable to memory corruption CVE-2022-24070 is fixed in 24 products on 1 platform, first by libapache2-mod-svn 1.13.0-3ubuntu0.1, released April 11, 2021. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2022-24070 - Priority: High - CVSS: 7.5 (Medium) - EPSS: 0.0887 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Apr 11, 2021 ## Description Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libapache2-mod-svn Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [libapache2-mod-svn 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libapache2-mod-svn-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | libapache2-mod-svn Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [libapache2-mod-svn 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libapache2-mod-svn-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | libserf RHEL 8 | 0:1.3.9-9.module+el8.4.0+8637+d3bad2c2 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | libserf almalinux 8 | 1.3.9-9.module_el8.3.0+2053+ac338b6d | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | libserf ol 8 | 0:1.3.9-9.module+el8.3.0+7671+a87d5147 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | libserf rocky 8 | 0:1.3.9-9.module+el8.7.0+1065+42200b2e | [RLSA-2022:4941](https://patchblox.com/security/data/fix/linux/rlsa-2022-4941.md) | Jun 8, 2022 | | Linux | libsvn-java Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [libsvn-java 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libsvn-java-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | libsvn-java Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [libsvn-java 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libsvn-java-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | libsvn-perl Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [libsvn-perl 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libsvn-perl-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | libsvn-perl Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [libsvn-perl 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libsvn-perl-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | libsvn1 Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [libsvn1 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libsvn1-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | libsvn1 Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [libsvn1 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libsvn1-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | mod_dav_svn RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | mod_dav_svn RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | mod_dav_svn almalinux 8 | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | mod_dav_svn ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | mod_dav_svn ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | python-subversion Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [python-subversion 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python-subversion-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | python3-subversion RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | python3-subversion RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | python3-subversion Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [python3-subversion 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-subversion-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | python3-subversion amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | python3-subversion ol 8 | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 | [ELSA-2022-4941](https://patchblox.com/security/data/fix/linux/elsa-2022-4941.md) | Jun 9, 2022 | | Linux | python3-subversion ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | python3-subversion-debuginfo amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | ruby-svn Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [ruby-svn 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ruby-svn-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | ruby-svn Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [ruby-svn 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ruby-svn-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | subversion Debian 12.15 (bookworm) | 1.14.2-1 | [DEBIAN-CVE-2022-24070](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24070.md) | Apr 12, 2022 | | Linux | subversion Debian 13.5 (trixie) | 1.14.2-1 | [DEBIAN-CVE-2022-24070](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24070.md) | Apr 12, 2022 | | Linux | subversion Debian 14 | 1.14.2-1 | [DEBIAN-CVE-2022-24070](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24070.md) | Apr 12, 2022 | | Linux | subversion RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | subversion Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [subversion 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-subversion-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | subversion Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [subversion 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-subversion-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | subversion almalinux 8 | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | subversion rocky 8 | 0:1.14.1-2.module+el8.7.0+1066+f8abeb19 | [RLSA-2022:4941](https://patchblox.com/security/data/fix/linux/rlsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion rocky 9 | 0:1.14.1-5.el9_0 | [RLSA-2022:4591](https://patchblox.com/security/data/fix/linux/rlsa-2022-4591.md) | May 18, 2022 | | Linux | subversion-debuginfo amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-debugsource amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-devel RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion-devel RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | subversion-devel almalinux 8 | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion-devel amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-devel ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion-devel ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | subversion-devel-debuginfo amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-gnome RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion-gnome RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | subversion-gnome almalinux 8 | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion-gnome ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion-gnome ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | subversion-javahl RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion-javahl almalinux 8 | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion-javahl amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-javahl ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion-libs RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion-libs RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | subversion-libs almalinux 8 | 1.10.2-5.module_el8.6.0+2897+d2f1747f | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion-libs amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-libs ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion-libs ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | subversion-libs-debuginfo amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-perl RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion-perl RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | subversion-perl almalinux 8 | 1.10.2-5.module_el8.5.0+2896+dbb67bd2 | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion-perl amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-perl ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion-perl ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | subversion-perl-debuginfo amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-tools RHEL 8 | 0:1.14.1-2.module+el8.6.0+15201+2f551d15 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | subversion-tools RHEL 9 | 0:1.14.1-5.el9_0 | [RHSA-2022:4591](https://patchblox.com/security/data/fix/linux/rhsa-2022-4591.md) | May 18, 2022 | | Linux | subversion-tools Ubuntu 20.04 LTS (focal) | 1.13.0-3ubuntu0.1 | [subversion-tools 1.13.0-3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-subversion-tools-1.13.0-3ubuntu0.1.md) | Apr 11, 2021 | | Linux | subversion-tools Ubuntu 22.04.1 LTS (jammy) | 1.14.1-3ubuntu0.22.04.1 | [subversion-tools 1.14.1-3ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-subversion-tools-1.14.1-3ubuntu0.22.04.1.md) | Apr 11, 2021 | | Linux | subversion-tools almalinux 8 | 1.10.2-5.module_el8.6.0+2897+d2f1747f | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | subversion-tools amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | subversion-tools ol 8 | 0:1.10.2-5.module+el8.6.0+20670+d864ac37 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | subversion-tools ol 9 | 0:1.14.1-5.el9_0 | [ELSA-2022-4591](https://patchblox.com/security/data/fix/linux/elsa-2022-4591.md) | Jun 30, 2022 | | Linux | subversion-tools-debuginfo amzn 2023 | 1.14.2-5.amzn2023.0.2 | [ALAS2023-2023-011](https://patchblox.com/security/data/fix/linux/alas2023-2023-011.md) | Feb 17, 2023 | | Linux | utf8proc RHEL 8 | 0:2.1.1-5.module+el8.4.0+8637+d3bad2c2 | [RHSA-2022:4941](https://patchblox.com/security/data/fix/linux/rhsa-2022-4941.md) | Jun 8, 2022 | | Linux | utf8proc almalinux 8 | 2.1.1-5.module_el8.4.0+2266+ac338b6d | [ALSA-2022:2234](https://patchblox.com/security/data/fix/linux/alsa-2022-2234.md) | May 12, 2022 | | Linux | utf8proc ol 8 | 0:2.1.1-5.module+el8.3.0+7671+a87d5147 | [ELSA-2022-2234](https://patchblox.com/security/data/fix/linux/elsa-2022-2234.md) | May 19, 2022 | | Linux | utf8proc rocky 8 | 0:2.1.1-5.module+el8.4.0+407+38733e5a | [RLSA-2022:4941](https://patchblox.com/security/data/fix/linux/rlsa-2022-4941.md) | Jun 8, 2022 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.