Skip to content
OpenAdvisories
Unscored DSA-1854-1 1 CVE

apr apr-util - arbitrary code execution

Published Aug 8, 2009 · Updated Mar 9, 2026

Fixed packages 4

ReleasePackageFixed in
Debian · 4.0 apr 1.2.7-9
Debian · 4.0 apr-util 1.2.7+dfsg-2+etch3
Debian · 5.0 apr 1.2.12-5+lenny1
Debian · 5.0 apr-util 1.2.12+dfsg-8+lenny4

Vulnerabilities 1

  • Unscored —
    CVE-2009-2412 EPSS 14%

    Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka AP…