CVE-2009-1956

Опубликовано: 08 июн. 2009

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Ссылки

http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=129190899612998&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=129190899612998&w=2
Mailing List
Third Party Advisory
http://secunia.com/advisories/34724
Broken Link
http://secunia.com/advisories/35284
Broken Link
http://secunia.com/advisories/35395
Broken Link
http://secunia.com/advisories/35487
Broken Link
http://secunia.com/advisories/35565
Broken Link
http://secunia.com/advisories/35710
Broken Link
http://secunia.com/advisories/35797
Broken Link
http://secunia.com/advisories/35843
Broken Link
http://secunia.com/advisories/37221
Broken Link
http://security.gentoo.org/glsa/glsa-200907-03.xml
Third Party Advisory
http://support.apple.com/kb/HT3937
Third Party Advisory
http://svn.apache.org/viewvc?view=rev&revision=768417
Patch
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27014463
Third Party Advisory
http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*

Версия до 1.3.4 (включая)

Конфигурация 2

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.12 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04265

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2009-1956

ubuntu

около 16 лет назад

CVE-2009-1956

redhat

около 16 лет назад

CVE-2009-1956

debian

около 16 лет назад

Off-by-one error in the apr_brigade_vprintf function in Apache APR-uti ...

GHSA-4wj9-j34x-wjxp

github

около 3 лет назад

ELSA-2009-1107

oracle-oval

около 16 лет назад

ELSA-2009-1107: apr-util security update (MODERATE)

EPSS

Процентиль: 88%

0.04265

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-189