Skip to content
OpenAdvisories
Unscored DSA-2237-2 2 CVEs

apr - denial of service

Published May 15, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 apr 1.2.12-5+lenny4
Debian · 6.0 apr 1.4.2-6+squeeze2

Vulnerabilities 2

  • Unscored —
    CVE-2011-0419 Public exploit EPSS 30%

    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) lib…

  • Unscored —
    CVE-2011-1928 EPSS 10%

    The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apach…