Every CVESearch/Get API key

CVE-2009-2412

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...

10.0 HighFix available

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Exploit likelihood

13.8%Up 4.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used10.0

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2412
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2412
Updated
2026-11-02
EUVDEUVD-2009-2408No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
EUVD-2009-2408
Updated
2026-11-03
GitHub AdvisoriesGHSA-8g6v-29rv-3j6mNo score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
GHSA-8g6v-29rv-3j6m
Updated
2026-11-02
OSVBELL-CVE-2009-241210.0

CVE-2009-2412 does not affect BellSoft software

Record
BELL-CVE-2009-2412
CVSS 2.0
10.0 CriticalAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
OSVNo score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2412
Updated
2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2009-2412No score

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

Record
DEBIAN-CVE-2009-2412
Updated
2026-11-02
OSVopenSUSE-SU-2024:10063-1No score

libapr1-1.5.2-3.4 on GA media

These are all security issues fixed in the libapr1-1.5.2-3.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10063-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10268-1No score

apache2-2.4.23-4.1 on GA media

These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10268-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10568-1No score

libapr-util1-1.5.4-4.4 on GA media

These are all security issues fixed in the libapr-util1-1.5.4-4.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10568-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11586-1No score

apr-util-devel-1.6.1-8.1 on GA media

These are all security issues fixed in the apr-util-devel-1.6.1-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11586-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11596-1No score

apr-devel-1.7.0-3.1 on GA media

These are all security issues fixed in the apr-devel-1.7.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11596-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apr
Debian:12
before 1.3.8-1
1.3.8-1
apr
Debian:13
before 1.3.8-1
1.3.8-1
apr
Debian:14
before 1.3.8-1
1.3.8-1
apr-util
Debian:12
before 1.3.9+dfsg-1
1.3.9+dfsg-1
apr-util
Debian:13
before 1.3.9+dfsg-1
1.3.9+dfsg-1
apr-util
Debian:14
before 1.3.9+dfsg-1
1.3.9+dfsg-1
apr-util
Debian:4.0
before 1.2.7+dfsg-2+etch3, plus listed versions
1.2.7+dfsg-21.2.7+dfsg-2+etch2
1.2.7+dfsg-2+etch3
apr
Debian:4.0
before 1.2.7-9, plus listed versions
1.2.7-8.2
1.2.7-9
apr-util
Debian:5.0
before 1.2.12+dfsg-8+lenny4, plus listed versions
1.2.12+dfsg-81.2.12+dfsg-8+lenny21.2.12+dfsg-8+lenny3
1.2.12+dfsg-8+lenny4
apr
Debian:5.0
before 1.2.12-5+lenny1, plus listed versions
1.2.12-5
1.2.12-5+lenny1
Show 112 moreShow less
Affected packages
PackageAffectedFixed
apr
Red Hat:enterprise_linux:4::as
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::as
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::as
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::as
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::as
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::as
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:4::desktop
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::desktop
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::desktop
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::desktop
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:4::es
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::es
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::es
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::es
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::es
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::es
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:4::ws
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-devel
Red Hat:enterprise_linux:4::ws
before 0:0.9.4-24.9.el4_8.2
0:0.9.4-24.9.el4_8.2
apr-util
Red Hat:enterprise_linux:4::ws
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr-util-devel
Red Hat:enterprise_linux:4::ws
before 0:0.9.4-22.el4_8.2
0:0.9.4-22.el4_8.2
apr
Red Hat:enterprise_linux:5::client_workstation
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-util
Red Hat:enterprise_linux:5::client_workstation
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr
Red Hat:enterprise_linux:5::client
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-docs
Red Hat:enterprise_linux:5::client
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-util
Red Hat:enterprise_linux:5::client
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-docs
Red Hat:enterprise_linux:5::client
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr
Red Hat:enterprise_linux:5::server
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-devel
Red Hat:enterprise_linux:5::server
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-docs
Red Hat:enterprise_linux:5::server
before 0:1.2.7-11.el5_3.1
0:1.2.7-11.el5_3.1
apr-util
Red Hat:enterprise_linux:5::server
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-devel
Red Hat:enterprise_linux:5::server
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
apr-util-docs
Red Hat:enterprise_linux:5::server
before 0:1.2.7-7.el5_3.2
0:1.2.7-7.el5_3.2
httpd
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
httpd-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.0.46-75.ent
0:2.0.46-75.ent
mod_ssl
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 1:2.0.46-75.ent
1:2.0.46-75.ent
httpd22
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr-devel
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr-util
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-apr-util-devel
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
httpd22-devel
Red Hat:jboss_enterprise_web_server:1::el4
before 0:2.2.10-24.1.ep5.el4
0:2.2.10-24.1.ep5.el4
mod_ssl22
Red Hat:jboss_enterprise_web_server:1::el4
before 1:2.2.10-24.1.ep5.el4
1:2.2.10-24.1.ep5.el4
ant
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.6.5-1jpp_1rh
0:1.6.5-1jpp_1rh
avalon-logkit
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.2-2jpp_4rh
0:1.2-2jpp_4rh
axis
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.2.1-1jpp_3rh
0:1.2.1-1jpp_3rh
classpathx-jaf
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-2jpp_6rh
0:1.0-2jpp_6rh
classpathx-mail
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.1.1-2jpp_8rh
0:1.1.1-2jpp_8rh
geronimo-ejb-2.1-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-1.4-apis
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-connector-1.5-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-deployment-1.1-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-management-1.0-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jms-1.1-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jsp-2.0-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jta-1.0.1B-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-servlet-2.4-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs-javadoc
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
jakarta-commons-modeler
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:2.0-3jpp_2rh
0:2.0-3jpp_2rh
log4j
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.2.12-1jpp_1rh
0:1.2.12-1jpp_1rh
mx4j
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 1:3.0.1-1jpp_4rh
1:3.0.1-1jpp_4rh
pcsc-lite
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-debuginfo
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-doc
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-libs
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.3.3-3.el4
0:1.3.3-3.el4
rhpki-ca
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-20.el4
0:7.3.0-20.el4
rhpki-java-tools
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-10.el4
0:7.3.0-10.el4
rhpki-kra
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-14.el4
0:7.3.0-14.el4
rhpki-manage
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-19.el4
0:7.3.0-19.el4
rhpki-native-tools
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-6.el4
0:7.3.0-6.el4
rhpki-ocsp
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-13.el4
0:7.3.0-13.el4
rhpki-tks
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:7.3.0-13.el4
0:7.3.0-13.el4
tomcat5
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-common-lib
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jasper
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jsp-2.0-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-server-lib
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-servlet-2.4-api
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
xerces-j2
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:2.7.1-1jpp_1rh
0:2.7.1-1jpp_1rh
xml-commons
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
xml-commons-apis
Red Hat:certificate_system:7.3
From an advisory covering 39 CVEs
before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
apr
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
before 1.5.2-3.4
1.5.2-3.4
apache2
openSUSE:Tumbleweed
From an advisory covering 48 CVEs
before 2.4.23-4.1
2.4.23-4.1
apr-util
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
before 1.5.4-4.4
1.5.4-4.4
apr-util
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
before 1.6.1-8.1
1.6.1-8.1
apr
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
before 1.7.0-3.1
1.7.0-3.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-2412 is a high vulnerability (CVSS 10.0) in Apache Apr-util, published August 6, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.8%, the 96th percentile. Fixed in apr 1.3.8-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 91 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open