CVE-2009-1956

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive…

published June 6, 2009

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12042 · 96.1th percentile
Published
2009-06-06T18:00Z
EPSS history
Timeline
  • 06 JUN 18:00Z
    Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive…
    cvelistv5