apr: arbitrary code execution [LWN.net]

Package(s):

apr

CVE #(s):

CVE-2009-2412

Created:

August 6, 2009

Updated:

May 10, 2010

Description:

From the Mandriva alert: A vulnerability has been identified and corrected in apr and apr-util: Fix potential overflow in pools (apr) and rmm (apr-util), where size alignment was taking place (CVE-2009-2412).

Alerts:

SuSE	SUSE-SR:2010:011	2010-05-10
Mandriva	MDVSA-2009:199-1	2009-12-07
Mandriva	MDVSA-2009:314	2009-12-04
Gentoo	200909-03	2009-09-09
rPath	rPSA-2009-0119-1	2009-08-18
CentOS	CESA-2009:1204	2009-08-11
CentOS	CESA-2009:1205	2009-08-10
Ubuntu	USN-813-2	2009-08-08
Red Hat	RHSA-2009:1205-01	2009-08-10
Red Hat	RHSA-2009:1204-01	2009-08-10
Ubuntu	USN-813-3	2009-08-08
Ubuntu	USN-813-1	2009-08-08
Mandriva	MDVSA-2009:199	2009-08-08
Debian	DSA-1854-1	2009-08-08
Slackware	SSA:2009-219-03	2009-08-07
Slackware	SSA:2009-219-02	2009-08-07
Mandriva	MDVSA-2009:195-1	2009-08-06
Fedora	FEDORA-2009-8318	2009-08-07
Fedora	FEDORA-2009-8349	2009-08-07
Fedora	FEDORA-2009-8360	2009-08-07
Fedora	FEDORA-2009-8336	2009-08-07
Mandriva	MDVSA-2009:195	2009-08-06
SuSE	SUSE-SA:2009:050	2009-10-26

(Log in to post comments)