Red Hat Security AdvisoryRHSA-2009:1107
apr-util security update
Released 2009-06-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) apr-util-1.2.7-7.el5_3.1, apr-util-1.2.7-7.el5_3.1.i386, apr-util-1.2.7-7.el5_3.1.ia64 +9
- Red Hat Enterprise Linux AS version 4 apr-util-0.9.4-22.el4_8.1, apr-util-0.9.4-22.el4_8.1.i386, apr-util-0.9.4-22.el4_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) apr-util-1.2.7-7.el5_3.1, apr-util-1.2.7-7.el5_3.1.i386, apr-util-docs-1.2.7-7.el5_3.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) apr-util-1.2.7-7.el5_3.1, apr-util-devel-1.2.7-7.el5_3.1, apr-util-devel-1.2.7-7.el5_3.1.i386
- Red Hat Enterprise Linux Desktop version 4 apr-util-0.9.4-22.el4_8.1, apr-util-0.9.4-22.el4_8.1.i386, apr-util-devel-0.9.4-22.el4_8.1 +1
- Red Hat Enterprise Linux ES version 4 apr-util-0.9.4-22.el4_8.1, apr-util-0.9.4-22.el4_8.1.i386, apr-util-0.9.4-22.el4_8.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 apr-util-0.9.4-22.el4_8.1, apr-util-0.9.4-22.el4_8.1.i386, apr-util-0.9.4-22.el4_8.1.ia64 +3
Fixes 3 records
Priority HIGH 65
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of ser…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.52988 · Published 2009-06-06 · Fixed CWE-776
Priority MEDIUM 42
Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via cr…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.12042 · Published 2009-06-06 · Fixed CWE-189
Priority LOW 31
The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used wi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0853 · Published 2009-06-06 · Fixed CWE-119
THREATIST.IORead the docs