FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  321237
Date:      2013-06-19
Time:      11:08:02Z
Committer: cs

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
eb9212f7-526b-11de-bbf2-001b77d09812	apr -- multiple vulnerabilities Secunia reports: Some vulnerabilities have been reported in APR-util, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service). A vulnerability is caused due to an error in the processing of XML files and can be exploited to exhaust all available memory via a specially crafted XML file containing a predefined entity inside an entity definition. A vulnerability is caused due to an error within the "apr_strmatch_precompile()" function in strmatch/apr_strmatch.c, which can be exploited to crash an application using the library. RedHat reports: A single NULL byte buffer overflow flaw was found in apr-util's apr_brigade_vprintf() function. Discovery 2009-06-05 Entry 2009-06-08 apr lt 1.3.5.1.3.7 apache ge 2.2.0 lt 2.2.11_5 ge 2.0.0 lt 2.0.63_3 35221 CVE-2009-1955 CVE-2009-1956 CVE-2009-0023 http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 http://secunia.com/advisories/35284/ https://bugzilla.redhat.com/show_bug.cgi?id=3D504390
eb9212f7-526b-11de-bbf2-001b77d09812	apr -- multiple vulnerabilities Secunia reports: Some vulnerabilities have been reported in APR-util, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service). A vulnerability is caused due to an error in the processing of XML files and can be exploited to exhaust all available memory via a specially crafted XML file containing a predefined entity inside an entity definition. A vulnerability is caused due to an error within the "apr_strmatch_precompile()" function in strmatch/apr_strmatch.c, which can be exploited to crash an application using the library. RedHat reports: A single NULL byte buffer overflow flaw was found in apr-util's apr_brigade_vprintf() function. Discovery 2009-06-05 Entry 2009-06-08 apr lt 1.3.5.1.3.7 apache ge 2.2.0 lt 2.2.11_5 ge 2.0.0 lt 2.0.63_3 35221 CVE-2009-1955 CVE-2009-1956 CVE-2009-0023 http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 http://secunia.com/advisories/35284/ https://bugzilla.redhat.com/show_bug.cgi?id=3D504390

VuXML ID

Description

eb9212f7-526b-11de-bbf2-001b77d09812

apr -- multiple vulnerabilities

Secunia reports:

Some vulnerabilities have been reported in APR-util, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service).

A vulnerability is caused due to an error in the processing of XML files and can be exploited to exhaust all available memory via a specially crafted XML file containing a predefined entity inside an entity definition.

A vulnerability is caused due to an error within the "apr_strmatch_precompile()" function in strmatch/apr_strmatch.c, which can be exploited to crash an application using the library.

RedHat reports:

A single NULL byte buffer overflow flaw was found in apr-util's apr_brigade_vprintf() function.

Discovery 2009-06-05
Entry 2009-06-08
apr

lt 1.3.5.1.3.7

apache

ge 2.2.0 lt 2.2.11_5

ge 2.0.0 lt 2.0.63_3

35221
CVE-2009-1955
CVE-2009-1956
CVE-2009-0023
http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3
http://secunia.com/advisories/35284/
https://bugzilla.redhat.com/show_bug.cgi?id=3D504390