2009-06-08 03:00:00 2017-09-29 03:34:40

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

PARTIAL
Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.0 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.1.2 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.2.1 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.0 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.2.6 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.2 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.2.2 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.1 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.4 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.2.8 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.4 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.5 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.2.7 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.3 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.1.1 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.0.2 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.1.0 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.0.1 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.1 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 0.9.2 Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.3