Apache Httpd < 2.0.64 : APR apr_palloc heap overflow

A flaw in aprpalloc in the bundled copy of APR could cause heap overflows in programs that try to aprpalloc a user controlled size. The Apache HTTP Server itself does not pass unsanitized user-provided sizes to this function, so it could only be triggered through some other application which uses...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

Fedora Core 9 FEDORA-2009-6014 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6014. OpenVAS Vulnerability Test $Id: fcore20096014.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6014 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-5969 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-5969. OpenVAS Vulnerability Test $Id: fcore20095969.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5969 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-6261 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6261. OpenVAS Vulnerability Test $Id: fcore20096261.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6261 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-6261 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6261. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 9 FEDORA-2009-6014 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6014. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-5969 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-5969. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 11 : apr-util-1.3.7-1.fc11 (2009-6261)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...

Fedora 10 : apr-util-1.3.7-1.fc10 (2009-5969)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...

Fedora 9 : apr-util-1.2.12-7.fc9 (2009-6014)

Backport security fixes from upstream version 1.3.7: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion technique. - CVE-2009-1956 Fix off by one overflow in...

[SECURITY] Fedora 11 Update: apr-util-1.3.7-1.fc11

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

[SECURITY] Fedora 9 Update: apr-util-1.2.12-7.fc9

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

Apache APR-Utils Version Detection

This script retrieves the version of Apache APR-Utils and saves the result in KB. OpenVAS Vulnerability Test $Id: secpodapacheapr-utilsdetect.nasl 8138 2017-12-15 11:42:07Z cfischer $ Apache APR-Utils Version Detection Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com...

Apache APR-Utils XML Parser Denial of Service Vulnerability

The host is installed with Apache APR-Utils and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodapacheapr-utilsxmldosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Apache APR-Utils XML Parser Denial of Service Vulnerability Authors: Nikita MR Copyright: Copyright ...

Apache APR-Utils Version Detection

This script retrieves the version of Apache APR-Utils. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

Apache APR-Utils Multiple Denial of Service Vulnerabilities

Apache APR-Utils is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Security Advisory CESA-2009:1107 (apr-util)

The remote host is missing updates to apr-util announced in advisory CESA-2009:1107. CESA-2009:1107 64272 2 $Id: ovcesa20091107.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1107 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1107

The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for...