CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
97.3%
Matthew Palmer discovered an underflow flaw in apr-util. An attacker could
cause a denial of service via application crash in Apache using a crafted
SVNMasterURI directive, .htaccess file, or when using mod_apreq2.
Applications using libapreq2 are also affected. (CVE-2009-0023)
It was discovered that the XML parser did not properly handle entity
expansion. A remote attacker could cause a denial of service via memory
resource consumption by sending a crafted request to an Apache server
configured to use mod_dav or mod_dav_svn. (CVE-2009-1955)
C. Michael Pilato discovered an off-by-one buffer overflow in apr-util when
formatting certain strings. For big-endian machines (powerpc, hppa and
sparc in Ubuntu), a remote attacker could cause a denial of service or
information disclosure leak. All other architectures for Ubuntu are
not considered to be at risk. (CVE-2009-1956)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 9.04 | noarch | libaprutil1 | < 1.2.12+dfsg-8ubuntu0.1 | UNKNOWN |
Ubuntu | 9.04 | noarch | libaprutil1 | < dbg-1.2.12+dfsg-8ubuntu0.1 | UNKNOWN |
Ubuntu | 9.04 | noarch | libaprutil1 | < dev-1.2.12+dfsg-8ubuntu0.1 | UNKNOWN |
Ubuntu | 8.10 | noarch | libaprutil1 | < 1.2.12+dfsg-7ubuntu0.1 | UNKNOWN |
Ubuntu | 8.10 | noarch | libaprutil1 | < dbg-1.2.12+dfsg-7ubuntu0.1 | UNKNOWN |
Ubuntu | 8.10 | noarch | libaprutil1 | < dev-1.2.12+dfsg-7ubuntu0.1 | UNKNOWN |
Ubuntu | 8.04 | noarch | libaprutil1 | < 1.2.12+dfsg-3ubuntu0.1 | UNKNOWN |
Ubuntu | 8.04 | noarch | libaprutil1-dbg | < 1.2.12+dfsg-3ubuntu0.1 | UNKNOWN |
Ubuntu | 8.04 | noarch | libaprutil1-dev | < 1.2.12+dfsg-3ubuntu0.1 | UNKNOWN |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
97.3%