Lucene search

K
freebsdFreeBSD762D1C6D-0722-11D9-B45D-000C41E2CDAD
HistorySep 15, 2004 - 12:00 a.m.

apache -- apr_uri_parse IPv6 address handling vulnerability

2004-09-1500:00:00
vuxml.freebsd.org
18

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.089 Low

EPSS

Percentile

94.5%

The Apache Software Foundation Security Team discovered a
programming error in the apr-util library function apr_uri_parse.
When parsing IPv6 literal addresses, it is possible that a
length is incorrectly calculated to be negative, and this
value is passed to memcpy. This may result in an exploitable
vulnerability on some platforms, including FreeBSD.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache= 2.0UNKNOWN
FreeBSDanynoarchapache< 2.0.50_3UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.089 Low

EPSS

Percentile

94.5%