CVE-2009-1956
EPSS 5.4%Published: 6/8/2009Modified: 4/28/2026
Description
Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.
Affected packages (1)
- Debian/apr-utilfrom 0, < 1.3.7+dfsg-1