VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 8, 2009· Updated Jun 16, 2026

CVE-2009-1956

CVE-2009-1956

Description

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Apache/Apr Util2 versions
    cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*range: <=1.3.4
    • (no CPE)range: <1.3.5
  • Apache/HTTP Server
    cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
    Range: >=2.2.0,<2.2.12
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/apache2&distro=openSUSE%20Tumbleweed
    Range: < 2.4.23-4.1

Patches

Vulnerability mechanics

References

51

News mentions

0

No linked articles in our index yet.