Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Apr-util | Apache | 0.9.1 (including) | 0.9.1 (including) |
| Apr-util | Apache | 0.9.2 (including) | 0.9.2 (including) |
| Apr-util | Apache | 0.9.2-dev (including) | 0.9.2-dev (including) |
| Apr-util | Apache | 0.9.3 (including) | 0.9.3 (including) |
| Apr-util | Apache | 0.9.3-dev (including) | 0.9.3-dev (including) |
| Apr-util | Apache | 0.9.4 (including) | 0.9.4 (including) |
| Apr-util | Apache | 0.9.5 (including) | 0.9.5 (including) |
| Apr-util | Apache | 0.9.6 (including) | 0.9.6 (including) |
| Apr-util | Apache | 0.9.7-dev (including) | 0.9.7-dev (including) |
| Apr-util | Apache | 0.9.8 (including) | 0.9.8 (including) |
| Apr-util | Apache | 0.9.9 (including) | 0.9.9 (including) |
| Apr-util | Apache | 0.9.16 (including) | 0.9.16 (including) |
| Apr-util | Apache | 1.3.0 (including) | 1.3.0 (including) |
| Apr-util | Apache | 1.3.1 (including) | 1.3.1 (including) |
| Apr-util | Apache | 1.3.2 (including) | 1.3.2 (including) |
| Apr-util | Apache | 1.3.3 (including) | 1.3.3 (including) |
| Apr-util | Apache | 1.3.4 (including) | 1.3.4 (including) |
| Apr-util | Apache | 1.3.4-dev (including) | 1.3.4-dev (including) |
| Apr-util | Apache | 1.3.5 (including) | 1.3.5 (including) |
| Apr-util | Apache | 1.3.6 (including) | 1.3.6 (including) |
| Apr-util | Apache | 1.3.6-dev (including) | 1.3.6-dev (including) |
| Apr-util | Apache | 1.3.7 (including) | 1.3.7 (including) |
| Apr-util | Apache | 1.3.8 (including) | 1.3.8 (including) |
| Portable_runtime | Apache | 0.9.1 (including) | 0.9.1 (including) |
| Portable_runtime | Apache | 0.9.2 (including) | 0.9.2 (including) |
| Portable_runtime | Apache | 0.9.2-dev (including) | 0.9.2-dev (including) |
| Portable_runtime | Apache | 0.9.3 (including) | 0.9.3 (including) |
| Portable_runtime | Apache | 0.9.3-dev (including) | 0.9.3-dev (including) |
| Portable_runtime | Apache | 0.9.4 (including) | 0.9.4 (including) |
| Portable_runtime | Apache | 0.9.5 (including) | 0.9.5 (including) |
| Portable_runtime | Apache | 0.9.6 (including) | 0.9.6 (including) |
| Portable_runtime | Apache | 0.9.7 (including) | 0.9.7 (including) |
| Portable_runtime | Apache | 0.9.7-dev (including) | 0.9.7-dev (including) |
| Portable_runtime | Apache | 0.9.8 (including) | 0.9.8 (including) |
| Portable_runtime | Apache | 0.9.9 (including) | 0.9.9 (including) |
| Portable_runtime | Apache | 0.9.16-dev (including) | 0.9.16-dev (including) |
| Portable_runtime | Apache | 1.3.0 (including) | 1.3.0 (including) |
| Portable_runtime | Apache | 1.3.1 (including) | 1.3.1 (including) |
| Portable_runtime | Apache | 1.3.2 (including) | 1.3.2 (including) |
| Portable_runtime | Apache | 1.3.3 (including) | 1.3.3 (including) |
| Portable_runtime | Apache | 1.3.4 (including) | 1.3.4 (including) |
| Portable_runtime | Apache | 1.3.4-dev (including) | 1.3.4-dev (including) |
| Portable_runtime | Apache | 1.3.5 (including) | 1.3.5 (including) |
| Portable_runtime | Apache | 1.3.6 (including) | 1.3.6 (including) |
| Portable_runtime | Apache | 1.3.6-dev (including) | 1.3.6-dev (including) |
| Portable_runtime | Apache | 1.3.7 (including) | 1.3.7 (including) |
| Portable_runtime | Apache | 1.3.8 (including) | 1.3.8 (including) |
| JBEWS 1.0 for RHEL 4 | RedHat | httpd22-0:2.2.10-24.1.ep5.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | ant-0:1.6.5-1jpp_1rh | * |
| Red Hat Certificate System 7.3 | RedHat | avalon-logkit-0:1.2-2jpp_4rh | * |
| Red Hat Certificate System 7.3 | RedHat | axis-0:1.2.1-1jpp_3rh | * |
| Red Hat Certificate System 7.3 | RedHat | classpathx-jaf-0:1.0-2jpp_6rh | * |
| Red Hat Certificate System 7.3 | RedHat | classpathx-mail-0:1.1.1-2jpp_8rh | * |
| Red Hat Certificate System 7.3 | RedHat | geronimo-specs-0:1.0-0.M4.1jpp_10rh | * |
| Red Hat Certificate System 7.3 | RedHat | jakarta-commons-modeler-0:2.0-3jpp_2rh | * |
| Red Hat Certificate System 7.3 | RedHat | log4j-0:1.2.12-1jpp_1rh | * |
| Red Hat Certificate System 7.3 | RedHat | mx4j-1:3.0.1-1jpp_4rh | * |
| Red Hat Certificate System 7.3 | RedHat | pcsc-lite-0:1.3.3-3.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-ca-0:7.3.0-20.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-java-tools-0:7.3.0-10.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-kra-0:7.3.0-14.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-manage-0:7.3.0-19.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-native-tools-0:7.3.0-6.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-ocsp-0:7.3.0-13.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-tks-0:7.3.0-13.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | tomcat5-0:5.5.23-0jpp_4rh.16 | * |
| Red Hat Certificate System 7.3 | RedHat | xerces-j2-0:2.7.1-1jpp_1rh | * |
| Red Hat Certificate System 7.3 | RedHat | xml-commons-0:1.3.02-2jpp_1rh | * |
| Red Hat Enterprise Linux 3 | RedHat | httpd-0:2.0.46-75.ent | * |
| Red Hat Enterprise Linux 4 | RedHat | apr-0:0.9.4-24.9.el4_8.2 | * |
| Red Hat Enterprise Linux 4 | RedHat | apr-util-0:0.9.4-22.el4_8.2 | * |
| Red Hat Enterprise Linux 5 | RedHat | apr-0:1.2.7-11.el5_3.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | apr-util-0:1.2.7-7.el5_3.2 | * |
| Apache2 | Ubuntu | dapper | * |
| Apr | Ubuntu | hardy | * |
| Apr | Ubuntu | intrepid | * |
| Apr | Ubuntu | jaunty | * |
| Apr | Ubuntu | upstream | * |
| Apr-util | Ubuntu | hardy | * |
| Apr-util | Ubuntu | intrepid | * |
| Apr-util | Ubuntu | jaunty | * |
| Apr-util | Ubuntu | upstream | * |