CVE-2016-8734

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-8734
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8734.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-8734
Downstream
Related
Published
2017-10-16T13:29:00Z
Modified
2025-08-09T19:01:28Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

References

Affected packages

Git / github.com/apache/subversion

Affected ranges

Type
GIT
Repo
https://github.com/apache/subversion
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
037cdbc70830a2978e43f651ca704b10ec9d3a05
Last affected
08a4688bda9204c93c638be81101c8dd20d275e0
Last affected
0f1c5a0b48ff010953bbb9cb8ff05e79427c0396
Last affected
12d9bb7e55eaef253e94ff41e9cdcb8f0280ae4d
Last affected
13ba6f378327b181245755b79f5ab588ab60a884
Last affected
17d7735f656588e79641897aebd990d028b92cea
Last affected
1fceb5d76f0bb17c0b54c2f04813f5aa9da44b3b
Last affected
2421fae8f18f6e50e351c2b6c5bdb0618511db35
Last affected
28a7ba4756f227cf24be56a6ecdff9bbefd489df
Last affected
2a1da160aefefbb8f6c7a401348de9c5e909838c
Last affected
2b4c2e8507385d92549fab3bda844a96cb6a6ba4
Last affected
2b7574250bb2dab00cf0fa840e38807c2e95e177
Last affected
2c9ec8ef409389cdaa605a1faaa61a41907badb0
Last affected
325d5a072757c45aab0ccf802190e8ecccd0dd1e
Last affected
330041fe2b6c49b7dd5e2defd6193b6bc263c325
Last affected
3377d6f8941ff55b1fdeaa0e8862b03902a8f9d7
Last affected
37fc8aa1484784480ac71ab85ed8a79529487e0f
Last affected
3b96e0b7c8a3225be56b6a987f83a12524f88754
Last affected
3dd825ec65165222c2347104d174b69b7ba2b0c9
Last affected
3dec6a0529685631fa7a4975a59424f815f121cb
Last affected
3ecc188f6b06a9349768f5594eec7c4fa9bb92f1
Last affected
3f582fc98d82c0f76f7b9e695c53942f99560d11
Last affected
42bf8e6f315a69eb1f9a0b293858a6d4642cc1dd
Last affected
461ae9d97a387551b152a39a8c026e9743452f3d
Last affected
48e6cf3eafddbd5f318c4c5d6023c8b5371ac532
Last affected
4c63e7cdc7aeea8e3e38551c0665af7a495c2952
Last affected
50f98394c60fc723984c625c7b7bf59eb002778a
Last affected
5630bac78658acd256bd64506e8f69045ba78003
Last affected
5991d4f8e73f1cf7abf47db68279877f2874a552
Last affected
5d9f0e6726e28e5cf43e857033cc6658fb1d0bb5
Last affected
60f2a5a23627cfffc2ca861f25319065f0437cee
Last affected
6808637504c0078473113e13f8f50c15b577d0d2
Last affected
681d68ef6a6fd67a6f31e6d90e83e65e6a29c0ae
Last affected
69a337f1474944529566bc32581770f17cc0af0c
Last affected
6a714a24a489050364efe1db2bc9ec894bbce349
Last affected
6ac0bbcfd6f3ea8d90fde706a7c9cfeb29d7c349
Last affected
6dc74f99b8037019274c6c95f1165640fceb076d
Last affected
7025076179c1227204d6cf090128e16a80b7367e
Last affected
75f6673eb83f0820569fe8c4c1a4eddeb847a2f4
Last affected
7665a987cb74e217474f21ec063dbf24c69b3624
Last affected
766e99ae0460ce797d263ad63100e275736428ff
Last affected
7842912504294e6241ff0fdb7971e91224d4dfdb
Last affected
7afc8760cd51ab4e8038f13f742d291c04421b32
Last affected
7e3c0e7e2396df845a8eb85d6620cfba0892f71b
Last affected
7f3ce689da1650b081a95ff0c1da1918f8564d10
Last affected
7f64f8a2a65527ee358fb2ccc7a6eb9afeecc48c
Last affected
8190064c7276405e2d6d822e8553b514058d180e
Last affected
82240dd68da26ea86821dbb4e0f370099f77b3d1
Last affected
85cdf5358d526ad1b39632d1810bcef96e578554
Last affected
862040e936a1aa9eb23214cbba3cf32ece30ce6b
Last affected
874751937dace02c3389aafbb722c23f646e3f9f
Last affected
8a154b5fb76ffacf4170ddded153f49348d3df12
Last affected
a17f1a75f43e99e99bd0c42ab51c9ad7801a8863
Last affected
a3d58ef8e16565cfbb28f5ac7f567bd0034cfa96
Last affected
abb5942b351e18952486f778e07c359514519dab
Last affected
ac3365e6673cb1a95902a4a84a9a3318add52fab
Last affected
b3677ed3b5adca7f4e679884ec154cce5c73a48c
Last affected
b6f6139e28393f76ce24949071ea49389c3f097c
Last affected
ba6f0f6e07a946a762ef4e065c131488425e6d8b
Last affected
bd6c215f0b0c95a57cda7098adac1cc60f379578
Last affected
bfcfce5f8efc0244011cf51c1ad7359021068b60
Last affected
c038871c2a6b281f30d893949dc0d1705c3876a6
Last affected
c2c48e71cb85fb85c1146ac66be6a20d5f772459
Last affected
ca672a52b1eab7e53f7c14aab8f90557d30317c0
Last affected
d52e4d8128461942ce4d495fbf5c4ef020bb2e2a
Last affected
d5c449a05c043ec247cb68cb2bbb891779eb8566
Last affected
d76021d164fc3a617120ebd81f6ae5e43ad8a0c4
Last affected
d790585b8e2667f86b1d2a306a6fd3172aed1b2b
Last affected
dc0c17ccf32a0e33ab857bb29359a78f253fd8f4
Last affected
e03e7ac2e5341db1dc6646ecbd5893fc72f7d5cd
Last affected
e096a5e22aa3a8bca30e2a4c6fa4b4a5bfd1f38f
Last affected
ec2d4883a917c6108d43b992f431b33ab3a67536
Last affected
ecd3ad3f00605c7a271d57a176061bb006a06ecd
Last affected
ee06e5a53995fbea8b44030eb0cac8b944269d66
Last affected
efeb54930ea525412643809a05473a075c04521c
Last affected
eff6041bbd2da842ad7c510f3f269921add2d435
Last affected
f1dccf04a58fef0de466918a583067ceaccf9a3b
Last affected
f56cb3f5443be1cdc84201b8bcea476e6388fdfe
Last affected
fb1a48ea90df410f16f6c6ffe47fc0d5b1f782cc
Last affected
fc59b48000a772c634e9316f85649a1982ce37ef