Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-1956
HistoryJun 08, 2009 - 12:00 a.m.

CVE-2009-1956

2009-06-0800:00:00
ubuntu.com
ubuntu.com
9

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.316 Low

EPSS

Percentile

96.9%

JSON

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util
before 1.3.5 on big-endian platforms allows remote attackers to obtain
sensitive information or cause a denial of service (application crash) via
crafted input.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchapache2<Β 2.0.55-4ubuntu2.5UNKNOWN
ubuntu8.04noarchapr-util<Β 1.2.12+dfsg-3ubuntu0.1UNKNOWN
ubuntu8.10noarchapr-util<Β 1.2.12+dfsg-7ubuntu0.1UNKNOWN
ubuntu9.04noarchapr-util<Β 1.2.12+dfsg-8ubuntu0.1UNKNOWN

Related

seebug 1
cve 1
debiancve 1
httpd 1
prion 1
openvas 49
nessus 28
redhat 2
gentoo 1
fedora 3
centos 2
freebsd 2
securityvulns 2
oraclelinux 2
ubuntu 2
slackware 1
altlinux 3
oracle 1
seebug
seebug
Apache APR-util apr_brigade_vprintfε‡½ζ•°ε•ε­—θŠ‚ζΊ’ε‡ΊζΌζ΄ž
2009-06-11 00:00:00
cve
cve
CVE-2009-1956
2009-06-08 01:00:00
debiancve
debiancve
CVE-2009-1956
2009-06-08 01:00:00
httpd
httpd
Apache Httpd < 2.2.12 : APR-util off-by-one overflow
2009-04-24 00:00:00
prion
prion
Input validation
2009-06-08 01:00:00
openvas
openvas
Apache APR-Utils Multiple Denial of Service Vulnerabilities
2009-06-24 00:00:00
Apache APR-Utils Multiple Denial of Service Vulnerabilities
2009-06-24 00:00:00
CentOS Update for apr-util CESA-2009:1107 centos5 i386
2011-08-09 00:00:00
nessus
nessus
Scientific Linux Security Update : httpd on SL3.x i386/x86_64
2012-08-01 00:00:00
SuSE 11 Security Update : libapr-util1 (SAT Patch Number 969)
2009-09-24 00:00:00
CentOS 5 : apr-util (CESA-2009:1107)
2010-01-06 00:00:00
redhat
redhat
(RHSA-2009:1108) Moderate: httpd security update
2009-06-16 00:00:00
(RHSA-2009:1107) Moderate: apr-util security update
2009-06-16 00:00:00
gentoo
gentoo
APR Utility Library: Multiple vulnerabilities
2009-07-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: apr-util-1.2.12-7.fc9
2009-06-24 19:32:52
[SECURITY] Fedora 11 Update: apr-util-1.3.7-1.fc11
2009-06-24 19:36:44
[SECURITY] Fedora 10 Update: apr-util-1.3.7-1.fc10
2009-06-24 19:40:30
centos
centos
apr security update
2009-06-19 09:53:07
httpd, mod_ssl security update
2009-06-17 14:02:38
freebsd
freebsd
apr -- multiple vulnerabilities
2009-06-05 00:00:00
apache22 -- several vulnerabilities
2009-07-28 00:00:00
securityvulns
securityvulns
Apache apr-util webDav DoS
2009-06-05 00:00:00
Oracle / Sun / MySQL / PeopleSoft multiple applications security vulnerabilities
2013-05-04 00:00:00
oraclelinux
oraclelinux
httpd security update
2009-06-17 00:00:00
apr-util security update
2009-06-16 00:00:00
ubuntu
ubuntu
apr-util vulnerabilities
2009-06-10 00:00:00
Apache vulnerabilities
2009-06-11 00:00:00
slackware
slackware
httpd
2009-08-02 15:33:03
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.316 Low

EPSS

Percentile

96.9%

JSON
Related for UB:CVE-2009-1956
seebug1cve1debiancve1httpd1prion1openvas49nessus28redhat2gentoo1fedora3centos2freebsd2securityvulns2oraclelinux2ubuntu2slackware1altlinux3oracle1