// For flags

CVE-2009-1956

apr-util single NULL byte buffer overflow

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Error de superación de límite (off-by-one) en la función apr_brigade_vprintf de Apache APR-util anterior a v1.3.5 en plataformas big-endian, permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (caída de la aplicación) a través de una entrada manipulada.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
Partial
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-06-06 CVE Reserved
  • 2009-06-06 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-189: Numeric Errors
CAPEC
References (50)
URL Tag Source
http://secunia.com/advisories/34724 Broken Link
http://secunia.com/advisories/35284 Broken Link
http://secunia.com/advisories/35395 Broken Link
http://secunia.com/advisories/35487 Broken Link
http://secunia.com/advisories/35565 Broken Link
http://secunia.com/advisories/35710 Broken Link
http://secunia.com/advisories/35797 Broken Link
http://secunia.com/advisories/35843 Broken Link
http://secunia.com/advisories/37221 Broken Link
http://support.apple.com/kb/HT3937 Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27014463 Third Party Advisory
http://www.mail-archive.com/dev%40apr.apache.org/msg21591.html Mailing List
http://www.mail-archive.com/dev%40apr.apache.org/msg21592.html Mailing List
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html Third Party Advisory
http://www.securityfocus.com/bid/35251 Third Party Advisory
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E Mailing List
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11567 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12237 Signature
URL Date SRC
http://www.openwall.com/lists/oss-security/2009/06/06/1 2024-08-07
https://bugzilla.redhat.com/show_bug.cgi?id=504390 2024-08-07
URL Date SRC
http://svn.apache.org/viewvc?view=rev&revision=768417 2023-11-07
URL Date SRC
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html 2023-11-07
http://marc.info/?l=bugtraq&m=129190899612998&w=2 2023-11-07
http://security.gentoo.org/glsa/glsa-200907-03.xml 2023-11-07
http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341 2023-11-07
http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 2023-11-07
http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 2023-11-07
http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 2023-11-07
http://www.redhat.com/support/errata/RHSA-2009-1107.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2009-1108.html 2023-11-07
http://www.ubuntu.com/usn/usn-786-1 2023-11-07
http://www.ubuntu.com/usn/usn-787-1 2023-11-07
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html 2023-11-07
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html 2023-11-07
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html 2023-11-07
https://access.redhat.com/security/cve/CVE-2009-1956 2010-08-04
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Apache
Search vendor "Apache"
 Apr-util
Search vendor "Apache" for product "Apr-util"
 <= 1.3.4
Search vendor "Apache" for product "Apr-util" and version " <= 1.3.4"
-
Affected
Apache
Search vendor "Apache"
 Http Server
Search vendor "Apache" for product "Http Server"
 >= 2.2.0 < 2.2.12
Search vendor "Apache" for product "Http Server" and version " >= 2.2.0 < 2.2.12"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 6.06
Search vendor "Canonical" for product "Ubuntu Linux" and version "6.06"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 9.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "9.04"
-
Affected