Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-4539

24
FAUCET Score

CVE-2010-4539 describes a denial-of-service vulnerability in the mod_dav_svn module of Apache HTTP Server, affecting Apache Subversion versions prior to 1.6.15. Authenticated attackers can trigger a NULL pointer dereference and daemon crash by manipulating SVNParentPath collections. This vulnerability has a CVSS score of 6.8, indicating a high impact on availability with low attack complexity, but requires authentication. There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.6.14CPE matchmatch criteria
cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*
0.6CPE matchmatch criteria
cpe:2.3:a:apache:subversion:0.6:*:*:*:*:*:*:*
0.7CPE matchmatch criteria
cpe:2.3:a:apache:subversion:0.7:*:*:*:*:*:*:*
0.8CPE matchmatch criteria
cpe:2.3:a:apache:subversion:0.8:*:*:*:*:*:*:*
0.9CPE matchmatch criteria
cpe:2.3:a:apache:subversion:0.9:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:L/Au:S/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
5.14%
Probability of exploitation in next 30 days
EPSS Percentile
91.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0514 is in the 97th percentile among its peer group of 21,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: subversion-0:1.6.11-7.el5_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: subversion-0:1.6.11-2.el6_0.2
View patch

Vendor Advisories (1)

redhatCVE-2010-4539Low

(mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser

Nov 26, 2010

References

lists.fedoraproject.org / pipermail/package-announce/2011-January/053230.html
lists.opensuse.org / opensuse-security-announce/2011-04/msg00000.html
mail-archives.apache.org / mod_mbox/subversion-users/201011.mbox/%3C3923B919-C2BE-41AD-84ED-7207837FAD1A%40ncsa.illinois.edu%3E
mail-archives.apache.org / mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E
openwall.com / lists/oss-security/2011/01/02/1
Patch
openwall.com / lists/oss-security/2011/01/03/9
openwall.com / lists/oss-security/2011/01/04/10
Patch
openwall.com / lists/oss-security/2011/01/04/8
Patch
openwall.com / lists/oss-security/2011/01/05/4
Patch
bugzilla.redhat.com / show_bug.cgi
ExploitPatch
secunia.com / advisories/42780
Vendor Advisory
secunia.com / advisories/42969
secunia.com / advisories/43115
secunia.com / advisories/43139
secunia.com / advisories/43346
exchange.xforce.ibmcloud.com / vulnerabilities/64472
svn.apache.org / repos/asf/subversion/tags/1.6.15/CHANGES
svn.apache.org / viewvc
Patch
mandriva.com / security/advisories
redhat.com / support/errata/RHSA-2011-0257.html
redhat.com / support/errata/RHSA-2011-0258.html
securityfocus.com / bid/45655
securitytracker.com / id
ubuntu.com / usn/USN-1053-1
vupen.com / english/advisories/2011/0015
Vendor Advisory
vupen.com / english/advisories/2011/0103
vupen.com / english/advisories/2011/0162
vupen.com / english/advisories/2011/0264