Lucene search

K
ubuntuUbuntuUSN-813-3
HistoryAug 08, 2009 - 12:00 a.m.

apr-util vulnerability

2009-08-0800:00:00
ubuntu.com
40

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.11 Low

EPSS

Percentile

95.1%

Releases

  • Ubuntu 9.04
  • Ubuntu 8.10
  • Ubuntu 8.04

Packages

  • apr-util -

Details

USN-813-1 fixed vulnerabilities in apr. This update provides the corresponding updates for apr-util.

Original advisory details:

Matt Lewis discovered that apr did not properly sanitize its input when
allocating memory. If an application using apr processed crafted input, a
remote attacker could cause a denial of service or potentially execute
arbitrary code as the user invoking the application.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlibaprutil1<Β 1.2.12+dfsg-8ubuntu0.3UNKNOWN
Ubuntu9.04noarchlibaprutil1-dbg<Β 1.2.12+dfsg-8ubuntu0.3UNKNOWN
Ubuntu9.04noarchlibaprutil1-dev<Β 1.2.12+dfsg-8ubuntu0.3UNKNOWN
Ubuntu8.10noarchlibaprutil1<Β 1.2.12+dfsg-7ubuntu0.3UNKNOWN
Ubuntu8.10noarchlibaprutil1-dbg<Β 1.2.12+dfsg-7ubuntu0.3UNKNOWN
Ubuntu8.10noarchlibaprutil1-dev<Β 1.2.12+dfsg-7ubuntu0.3UNKNOWN
Ubuntu8.04noarchlibaprutil1<Β 1.2.12+dfsg-3ubuntu0.2UNKNOWN
Ubuntu8.04noarchlibaprutil1-dbg<Β 1.2.12+dfsg-3ubuntu0.2UNKNOWN
Ubuntu8.04noarchlibaprutil1-dev<Β 1.2.12+dfsg-3ubuntu0.2UNKNOWN

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.11 Low

EPSS

Percentile

95.1%