CVE-2009-2412

Source
https://nvd.nist.gov/vuln/detail/CVE-2009-2412
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-2412.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2009-2412
Downstream
Related
Published
2009-08-06T15:30:00Z
Modified
2025-08-09T20:01:25Z
Summary
[none]
Details

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocatoralloc or (2) aprpalloc function in memory/unix/aprpools.c in APR; or crafted calls to the (3) aprrmmmalloc, (4) aprrmmcalloc, or (5) aprrmmrealloc function in misc/aprrmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

References

Affected packages