NVD

Id
49659  
Name
CVE-2009-2412  
Description
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-06  
Modified Date
2010-08-21  
Seq
2009-2412  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250973 49659 CVE-2009-2412 APPLE-SA-2009-11-09-1  View
250974 49659 CVE-2009-2412 SUSE-SA:2009:050  View
250975 49659 CVE-2009-2412 SUSE-SR:2010:011  View
250976 49659 CVE-2009-2412 oval:org.mitre.oval:def:8394  View
250977 49659 CVE-2009-2412 oval:org.mitre.oval:def:9958  View
250978 49659 CVE-2009-2412 http://support.apple.com/kb/HT3937  View
250979 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup  View
250980 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736  View
250981 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup  View
250982 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735  View
250983 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup  View
250984 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733  View
250985 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup  View
250986 49659 CVE-2009-2412 http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732  View
250987 49659 CVE-2009-2412 PK93225  View
250988 49659 CVE-2009-2412 PK99482  View
250989 49659 CVE-2009-2412 MDVSA-2009:195  View
250990 49659 CVE-2009-2412 35949  View
250991 49659 CVE-2009-2412 USN-813-2  View
250992 49659 CVE-2009-2412 ADV-2009-3184  View
250993 49659 CVE-2009-2412 ADV-2010-1107  View
250994 49659 CVE-2009-2412 FEDORA-2009-8336  View
250995 49659 CVE-2009-2412 FEDORA-2009-8360  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41010 JVNDB-2009-002016 APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性 Apache Portable Runtime (APR) ライブラリ、および Apache Portable Utility ライブラリ (APR-util) には、整数オーバーフローの脆弱性が存在します。 CVE-2009-2412 39843 CVE-2009-2412 49659 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002016.html 2009-08-06 2011-11-24 View