CVE-2012-0840

tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that...

DEBIAN-CVE-2012-0840

tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that...

Code injection

tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that...

CVE-2012-0840

tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that...

CVE-2012-0840

CVE-2012-0840 affects the Apache Portable Runtime (APR) library, specifically tables/apr_hash.c, up to version 1.4.5. The vulnerability arises from insufficient randomization of hash data structures, enabling context-dependent remote attackers to trigger predictable hash collisions and cause CPU ...

CVE-2012-0840

tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that...

CVE-2012-0840: Improper Input Validation

tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that...

PT-2012-2900

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime APR library versions through 1.4.5 Description The issue allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, due to the...

tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

Apache 2.2.x < 2.2.13 APR apr_palloc Heap Overflow

According to its self-reported banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.13. As such, it includes a bundled version of the Apache Portable Runtime APR library that contains a flaw in 'aprpalloc' that could cause a heap overflow. Note that the Apache HTTP serve...

CentOS Update for apr CESA-2011:0507 centos5 i386

Check for the Version of apr OpenVAS Vulnerability Test CentOS Update for apr CESA-2011:0507 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for apr CESA-2011:0844 centos5 i386

Check for the Version of apr OpenVAS Vulnerability Test CentOS Update for apr CESA-2011:0844 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for apr CESA-2011:0507 centos4 i386

Check for the Version of apr OpenVAS Vulnerability Test CentOS Update for apr CESA-2011:0507 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

FreeBSD Ports: apr1

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for apr FEDORA-2011-6750

Check for the Version of apr OpenVAS Vulnerability Test Fedora Update for apr FEDORA-2011-6750 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

apr: unconstrained recursion in apr_fnmatch

Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...

CentOS Update for apr CESA-2011:0844 centos4 i386

Check for the Version of apr OpenVAS Vulnerability Test CentOS Update for apr CESA-2011:0844 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for apr FEDORA-2011-6918

Check for the Version of apr OpenVAS Vulnerability Test Fedora Update for apr FEDORA-2011-6918 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for apr FEDORA-2011-7340

Check for the Version of apr OpenVAS Vulnerability Test Fedora Update for apr FEDORA-2011-7340 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

[SECURITY] Fedora 14 Update: apr-1.4.5-1.fc14

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...