apache22 -- several vulnerabilitiesentered 2009-08-25
no CVE referenced
CVE details
CVE-2009-1955
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
- Score
- 7.5 high
- Published
- 2009-06-08
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.
VuXML
apr -- multiple vulnerabilitiesentered 2009-06-08
no CVE referenced