Lucene search

K
ubuntuUbuntuUSN-813-2
HistoryAug 08, 2009 - 12:00 a.m.

Apache vulnerability

2009-08-0800:00:00
ubuntu.com
29

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.11 Low

EPSS

Percentile

95.1%

Releases

  • Ubuntu 6.06

Packages

  • apache2 -

Details

USN-813-1 fixed vulnerabilities in apr. This update provides the
corresponding updates for apr as provided by Apache on Ubuntu 6.06 LTS.

Original advisory details:

Matt Lewis discovered that apr did not properly sanitize its input when
allocating memory. If an application using apr processed crafted input, a
remote attacker could cause a denial of service or potentially execute
arbitrary code as the user invoking the application.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchlibapr0<Β 2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β 2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β common-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β mpm-perchild-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β mpm-prefork-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β mpm-worker-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β prefork-dev-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β threaded-dev-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchapache2<Β utils-2.0.55-4ubuntu2.7UNKNOWN
Ubuntu6.06noarchlibapr0<Β dev-2.0.55-4ubuntu2.7UNKNOWN

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.11 Low

EPSS

Percentile

95.1%