CVE-2014-3522

no score yetEPSS 5.6%

The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-297
Published: 2014-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:subversion
apple:xcode
canonical:ubuntu_linux
opensuse:opensuse

References

http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html
http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html
http://secunia.com/advisories/59432
http://secunia.com/advisories/59584
http://secunia.com/advisories/60100

Check your stack JSON