Vulnerability in Apache Apr-Util
CVE-2009-2412
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.138 (96.5th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 96.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.138 · newest: 0.138 · change: 0.000
Affected products
- Apache Apr-Util — versions 0.9.1, 0.9.2, 0.9.2-dev
- Apache Portable Runtime — versions 0.9.1, 0.9.2, 0.9.2-dev
Weakness classification (CWE)
References
- lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html (vendor-advisory)
- secunia.com/advisories/36233 (third-party-advisory)
- www.vupen.com/english/advisories/2010/1107 (vdb-entry)
- svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES (Exploit)
- secunia.com/advisories/37152 (third-party-advisory)
- lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html (vendor-advisory)
- secunia.com/advisories/36140 (Vendor Advisory, third-party-advisory)
- osvdb.org/56765 (vdb-entry)
- www-01.ibm.com/support/docview.wss (vendor-advisory)
- osvdb.org/56766 (vdb-entry)