VDB

ALPINE-CVE-2018-11782

ALPINE-CVE-2018-11782 PUBLISHED CVSS 6.5 MEDIUM

Record from OSV · Published September 26, 2019

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
subversionAlpine:v3.171.12.2-r0
subversionAlpine:v3.81.10.6-r0
subversionAlpine:v3.101.12.2-r0
subversionAlpine:v3.91.12.2-r0
subversionAlpine:v3.141.12.2-r0
subversionAlpine:v3.71.9.12-r0
subversionAlpine:v3.151.12.2-r0
subversionAlpine:v3.181.12.2-r0
subversionAlpine:v3.201.12.2-r0
subversionAlpine:v3.131.12.2-r0
subversionAlpine:v3.111.12.2-r0
subversionAlpine:v3.221.12.2-r0

6 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
Alpine:v3.17subversion1.10.0-r0, 1.10.2-r0, 1.11.1-r1
Alpine:v3.8subversion1.6.17-r1, 1.10.0, 1.6.6-r0
Alpine:v3.10subversion1.10.0-r0, 1.11.0-r0, 1.11.1-r0
Alpine:v3.9subversion1.7.0-r0, 0, 1.10.2-r0
Alpine:v3.14subversion1.9.4-r3, 1.9.5-r0, 1.9.5-r1
Alpine:v3.7subversion1.9.7-r0, 1.8.9-r0, 1.7.2-r0
Alpine:v3.15subversion1.7.2-r0, 1.11.1-r1, 1.12.0-r0
Alpine:v3.18subversion1.8.1-r2, 1.9.2-r0, 1.9.3-r0
Alpine:v3.20subversion1.11.1-r1, 1.10.2-r0, 0
Alpine:v3.13subversion1.9.5-r1, 1.8.9-r0, 1.8.5-r0
Alpine:v3.11subversion1.12.0-r1, 1.10.0, 1.8.0-r0
Alpine:v3.22subversion1.9.7-r0, 1.9.2-r0, 1.9.4-r0
Alpine:v3.16subversion0, 1.10.0-r0, 1.10.2-r0
Alpine:v3.12subversion1.10.0-r0, 1.9.0-r0, 1.9.4-r3
Alpine:v3.23subversion1.6.1-r0, 1.6.4-r0, 1.10.0
Alpine:v3.24subversion0, 1.10.0
Alpine:v3.19subversion1.9.4-r3, 1.10.0-r0, 1.10.0
Alpine:v3.21subversion1.10.0, 1.5.5-r0, 1.10.2-r0

Timeline

  • Sep 26, 2019 CVE Published
  • Jul 8, 2026 CVE Updated
  • Aug 8, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ALPINE-CVE-2018-11782
vulnetix vdb fixes ALPINE-CVE-2018-11782

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ALPINE-CVE-2018-11782/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›