← Database

CVE-2009-1956

MEDIUM CVSS: 6.4 Published: 2009-06-08 Modified: 2026-06-16

Description

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Affected Platforms

Apache Http ServerCanonical Ubuntu LinuxApache Apr-Util

Weakness Type

CWE-189

References