Every CVE Search/ Get API key

CVE-2009-2412

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...

10.0 HighFix available

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Exploit likelihood

13.8%Up 4.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2412
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2412
Updated
2026-11-02
EUVDEUVD-2009-2408 No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
EUVD-2009-2408
Updated
2026-11-03
GitHub AdvisoriesGHSA-8g6v-29rv-3j6m No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
GHSA-8g6v-29rv-3j6m
Updated
2026-11-02
OSVBELL-CVE-2009-2412 10.0

CVE-2009-2412 does not affect BellSoft software

Record
BELL-CVE-2009-2412
CVSS 2.0
10.0 CriticalAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
OSV No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2412
Updated
2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2009-2412 No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
DEBIAN-CVE-2009-2412
Updated
2026-11-02
OSVopenSUSE-SU-2024:10063-1 No score

libapr1-1.5.2-3.4 on GA media

These are all security issues fixed in the libapr1-1.5.2-3.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10063-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10268-1 No score

apache2-2.4.23-4.1 on GA media

These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10268-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10568-1 No score

libapr-util1-1.5.4-4.4 on GA media

These are all security issues fixed in the libapr-util1-1.5.4-4.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10568-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11586-1 No score

apr-util-devel-1.6.1-8.1 on GA media

These are all security issues fixed in the apr-util-devel-1.6.1-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11586-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11596-1 No score

apr-devel-1.7.0-3.1 on GA media

These are all security issues fixed in the apr-devel-1.7.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11596-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apr
Debian:12
 before 1.3.8-1
1.3.8-1
apr
Debian:13
 before 1.3.8-1
1.3.8-1
apr
Debian:14
 before 1.3.8-1
1.3.8-1
apr-util
Debian:12
 before 1.3.9+dfsg-1
1.3.9+dfsg-1
apr-util
Debian:13
 before 1.3.9+dfsg-1
1.3.9+dfsg-1
apr-util
Debian:14
 before 1.3.9+dfsg-1
1.3.9+dfsg-1
apr-util
Debian:4.0
 before 1.2.7+dfsg-2+etch3, plus listed versions
1.2.7+dfsg-21.2.7+dfsg-2+etch2
1.2.7+dfsg-2+etch3
apr
Debian:4.0
 before 1.2.7-9, plus listed versions
1.2.7-8.2
1.2.7-9
apr-util
Debian:5.0
 before 1.2.12+dfsg-8+lenny4, plus listed versions
1.2.12+dfsg-81.2.12+dfsg-8+lenny21.2.12+dfsg-8+lenny3
1.2.12+dfsg-8+lenny4
apr
Debian:5.0
 before 1.2.12-5+lenny1, plus listed versions
1.2.12-5
1.2.12-5+lenny1
Show 112 moreShow less
Affected packages
PackageAffectedFixed
apr
Red Hat:enterprise_linux:4::as
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::as
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::as
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::as
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:4::desktop
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::desktop
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::desktop
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::desktop
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:4::es
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::es
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::es
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::es
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:4::ws
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::ws
 before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::ws
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::ws
 before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-util
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr
Red Hat:enterprise_linux:5::client
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-docs
Red Hat:enterprise_linux:5::client
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-util
Red Hat:enterprise_linux:5::client
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-docs
Red Hat:enterprise_linux:5::client
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-devel
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-docs
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-util
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-devel
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-docs
Red Hat:enterprise_linux:5::server
 before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
httpd
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::as
 before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::desktop
 before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::es
 before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::ws
 before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd22
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr-devel
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr-util
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr-util-devel
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-devel
Red Hat:jboss_enterprise_web_server:1::el4
 before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
mod_ssl22
Red Hat:jboss_enterprise_web_server:1::el4
 before 1:2.2.10-24.1.ep5.el4
1:2.2.10-24.1.ep5.el4
ant
Red Hat:certificate_system:7.3
 before 0:1.6.5-1jpp_1rh
0:1.6.5-1jpp_1rh
avalon-logkit
Red Hat:certificate_system:7.3
 before 0:1.2-2jpp_4rh
0:1.2-2jpp_4rh
axis
Red Hat:certificate_system:7.3
 before 0:1.2.1-1jpp_3rh
0:1.2.1-1jpp_3rh
classpathx-jaf
Red Hat:certificate_system:7.3
 before 0:1.0-2jpp_6rh
0:1.0-2jpp_6rh
classpathx-mail
Red Hat:certificate_system:7.3
 before 0:1.1.1-2jpp_8rh
0:1.1.1-2jpp_8rh
geronimo-ejb-2.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-1.4-apis
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-connector-1.5-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-deployment-1.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-management-1.0-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jms-1.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jsp-2.0-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jta-1.0.1B-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-servlet-2.4-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs-javadoc
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
jakarta-commons-modeler
Red Hat:certificate_system:7.3
 before 0:2.0-3jpp_2rh
0:2.0-3jpp_2rh
log4j
Red Hat:certificate_system:7.3
 before 0:1.2.12-1jpp_1rh
0:1.2.12-1jpp_1rh
mx4j
Red Hat:certificate_system:7.3
 before 1:3.0.1-1jpp_4rh
1:3.0.1-1jpp_4rh
pcsc-lite
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-debuginfo
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-doc
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-libs
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
rhpki-ca
Red Hat:certificate_system:7.3
 before 0:7.3.0-20.el4
0:7.3.0-20.el4
rhpki-java-tools
Red Hat:certificate_system:7.3
 before 0:7.3.0-10.el4
0:7.3.0-10.el4
rhpki-kra
Red Hat:certificate_system:7.3
 before 0:7.3.0-14.el4
0:7.3.0-14.el4
rhpki-manage
Red Hat:certificate_system:7.3
 before 0:7.3.0-19.el4
0:7.3.0-19.el4
rhpki-native-tools
Red Hat:certificate_system:7.3
 before 0:7.3.0-6.el4
0:7.3.0-6.el4
rhpki-ocsp
Red Hat:certificate_system:7.3
 before 0:7.3.0-13.el4
0:7.3.0-13.el4
rhpki-tks
Red Hat:certificate_system:7.3
 before 0:7.3.0-13.el4
0:7.3.0-13.el4
tomcat5
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-common-lib
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jasper
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jsp-2.0-api
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-server-lib
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-servlet-2.4-api
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
xerces-j2
Red Hat:certificate_system:7.3
 before 0:2.7.1-1jpp_1rh
0:2.7.1-1jpp_1rh
xml-commons
Red Hat:certificate_system:7.3
 before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
xml-commons-apis
Red Hat:certificate_system:7.3
 before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
apr
openSUSE:Tumbleweed
 before 1.5.2-3.4
1.5.2-3.4
apache2
openSUSE:Tumbleweed
 before 2.4.23-4.1
2.4.23-4.1
apr-util
openSUSE:Tumbleweed
 before 1.5.4-4.4
1.5.4-4.4
apr-util
openSUSE:Tumbleweed
 before 1.6.1-8.1
1.6.1-8.1
apr
openSUSE:Tumbleweed
 before 1.7.0-3.1
1.7.0-3.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-2412 is a high vulnerability (CVSS 10.0) in Apache Apr-util, published August 6, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.8%, the 96th percentile. Fixed in apr 1.3.8-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 91 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open