Approved changes feed: RSS · Atom
cpe:2.3:a:apache:apr-util:0.9.2-dev:*:*:*:*:*:*:*
part: a version: 0.9.2-dev update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Apr Util (2804f1c4-2d92-5696-95e5-5903a5b9387b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/apr |
purl2cpe | 2026-06-01 10:14:31.839525 |
pkg:github/apache/apr-util |
purl2cpe | 2026-06-01 10:14:31.839527 |
pkg:gitlab/redhat/apr-util |
purl2cpe | 2026-06-01 10:14:31.839529 |
pkg:maven/org.apache.apr/apr |
purl2cpe | 2026-06-01 10:14:31.839530 |
pkg:rpm/centos/apr-util |
purl2cpe | 2026-06-01 10:14:31.839531 |
pkg:rpm/fedora/apr-util |
purl2cpe | 2026-06-01 10:14:31.839533 |
pkg:rpm/opensuse/apr-util |
purl2cpe | 2026-06-01 10:14:31.839534 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2412 |
vulnerable | 2026-06-08 04:51:28.328554 |
Details available
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
Published: 2009-08-06T15:00:00.000Z
Updated: 2024-08-07T05:52:14.398Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.