CVE-2009-2412

Severity

99%

Complexity

99%

Confidentiality

165%

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util)

First reported 15 years ago

2009-08-06 15:30:00

Last updated 7 years ago

2017-09-19 01:29:00

Affected Software

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.1

0.9.1

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.2

0.9.2

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.3

0.9.3

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.4

0.9.4

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.5

0.9.5

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.6

0.9.6

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.8

0.9.8

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.9

0.9.9

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.16

0.9.16

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.0

1.3.0

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.1

1.3.1

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.2

1.3.2

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.3

1.3.3

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.4

1.3.4

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.5

1.3.5

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.6

1.3.6

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.7

1.3.7

Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.8

1.3.8

References

APPLE-SA-2009-11-09-1

SUSE-SA:2009:050

SUSE-SR:2010:011

56765

56766

36138

Vendor Advisory

36140

Vendor Advisory

36166

36233

37152

37221

http://support.apple.com/kb/HT3937

http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup

http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733

Exploit

http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup

http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732

http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup

Exploit

http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736

http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup

Exploit

http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735

MDVSA-2009:195

35949

Patch

USN-813-2

ADV-2009-3184

ADV-2010-1107

PK93225

PK99482

[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

oval:org.mitre.oval:def:8394

oval:org.mitre.oval:def:9958

FEDORA-2009-8336

FEDORA-2009-8360

[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.