© 2026 vulntracker.io

CVE-2016-8734

N/A

Published: October 16, 2017 at 01:00 PM UTC

Updated: June 17, 2026 at 12:54 AM UTC

2 products affected across 2 vendorsDebian LinuxSubversion

Using Apache Subversion by Apache Software Foundation?

Get instant alerts when new vulnerabilities affect Apache Subversion - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 6%

Description

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Subversion · Apache

95%

1.4.0 ≤ v ≤ 1.8.161.9.0 ≤ v ≤ 1.9.41.4.0 1.4.1 1.4.2 1.4.3 1.4.4 1.4.5 1.4.6 1.5.0 1.5.1 1.5.2 1.5.3 1.5.4 1.5.5 1.5.6 1.5.7 1.5.8 1.6.0 1.6.1 1.6.10 1.6.11 1.6.12 1.6.13 1.6.14 1.6.15 1.6.16 1.6.17 1.6.18 1.6.19 1.6.2 1.6.20 1.6.21 1.6.23 1.6.3 1.6.4 1.6.5 1.6.6 1.6.7 1.6.8 1.6.9 1.7.0 1.7.1 1.7.10 1.7.11 1.7.12 1.7.13 1.7.14 1.7.15 1.7.16 1.7.17 1.7.18 1.7.19 1.7.2 1.7.20 1.7.3 1.7.4 1.7.5 1.7.6 1.7.7 1.7.8 1.7.9 1.8.0 1.8.1 1.8.10 1.8.11 1.8.12 1.8.13 1.8.14 1.8.15 1.8.16 1.8.2 1.8.3 1.8.4 1.8.5 1.8.6 1.8.7 1.8.8 1.8.9 1.9.0 1.9.1 1.9.2 1.9.3 1.9.4

Debian Linux · Debiandrupal

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (6)

Vendor Advisoryx_refsource_DEBIANThird Party Advisory

Source: [email protected]

http://www.debian.org/security/2017/dsa-3932

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/94588

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1037361

Mailing Listx_refsource_MLIST

Source: [email protected]

https://lists.apache.org/thread.html/7798f5cda1b2a3c70db4be77694b12dec8fcc1a441b00009d44f0e09%40%3Cannounce.apache.org%3E

x_refsource_CONFIRMIssue TrackingVendor Advisory

Source: [email protected]

https://subversion.apache.org/security/CVE-2016-8734-advisory.txt

x_refsource_MISC

Source: [email protected]

https://www.oracle.com/security-alerts/cpuoct2020.html

CVSS

4MEDIUM[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-400

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card