Skip to content
OpenAdvisories
Unscored DSA-1812-1 2 CVEs

apr-util - several vulnerabilities

Published Jun 4, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 apr-util 1.2.7+dfsg-2+etch2
Debian · 5.0 apr-util 1.2.12+dfsg-8+lenny2

Vulnerabilities 2

  • Unscored —
    CVE-2009-0023

    The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers…

    apr-util Debian
  • Unscored —
    CVE-2009-1955 Public exploit EPSS 53%

    The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_da…

    apr-util Debian