description: Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
problem types: Denial of Service
affected:
{
product: Apache Subversion
vendor: Apache Software Foundation
versions:
status: affected, version: 1.4.0 to 1.8.16
status: affected, version: 1.9.0 to 1.9.4
}