Two vulnerabilities have been reported in Apache Subversion, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) A NULL pointer dereference error in the mod_dav_svn module when processing baselined resource requests can be exploited to cause a crash.

This vulnerability is reported in versions 1.6.16 and prior.

2) An error within the mod_dav_svn module when handling certain path-based access control rules can be exploited to trigger an infinite loop and exhaust memory.

This vulnerability is reported in versions 1.5.0 through 1.6.16.

NOTE: A weakness in the handling of path-based access control rules, which could result in certain unreadable files and directories becoming readable has also been reported.

Solution
Update to version 1.6.17.

Provided and/or discovered by
1) Reported by the vendor
2) The vendor credits Ivan Zhakov, VisualSVN.

Original Advisory
http://subversion.apache.org/security/CVE-2011-1752-advisory.txt
http://subversion.apache.org/security/CVE-2011-1783-advisory.txt
http://subversion.apache.org/security/CVE-2011-1921-advisory.txt

Deep Links
Links available to Secunia VIM customers