apache apr-util CVE-2009-1956 in Apache and Canonical Products
Published on June 8, 2009

product logo product logo
Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2009-1956

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2009-1956 are published in these products:

Apache Apr Util
 
Apache HTTP Server
 
Canonical Ubuntu Linux
 

Exploit Probability

EPSS
4.27%
Percentile
88.67%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.