CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1955

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.037

EPSS Ranking 87.2%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2009-1955

Apache » Apr-Util » Version: 0.9.1

cpe:2.3:a:apache:apr-util:0.9.1
Apache » Apr-Util » Version: 0.9.10

cpe:2.3:a:apache:apr-util:0.9.10
Apache » Apr-Util » Version: 0.9.11

cpe:2.3:a:apache:apr-util:0.9.11
Apache » Apr-Util » Version: 0.9.12

cpe:2.3:a:apache:apr-util:0.9.12
Apache » Apr-Util » Version: 0.9.13

cpe:2.3:a:apache:apr-util:0.9.13
Apache » Apr-Util » Version: 0.9.14

cpe:2.3:a:apache:apr-util:0.9.14
Apache » Apr-Util » Version: 0.9.15

cpe:2.3:a:apache:apr-util:0.9.15
Apache » Apr-Util » Version: 0.9.16

cpe:2.3:a:apache:apr-util:0.9.16
Apache » Apr-Util » Version: 0.9.17

cpe:2.3:a:apache:apr-util:0.9.17
Apache » Apr-Util » Version: 0.9.18

cpe:2.3:a:apache:apr-util:0.9.18
Apache » Apr-Util » Version: 0.9.19

cpe:2.3:a:apache:apr-util:0.9.19
Apache » Apr-Util » Version: 0.9.2

cpe:2.3:a:apache:apr-util:0.9.2
Apache » Apr-Util » Version: 0.9.3

cpe:2.3:a:apache:apr-util:0.9.3
Apache » Apr-Util » Version: 0.9.4

cpe:2.3:a:apache:apr-util:0.9.4
Apache » Apr-Util » Version: 0.9.5

cpe:2.3:a:apache:apr-util:0.9.5
Apache » Apr-Util » Version: 0.9.6

cpe:2.3:a:apache:apr-util:0.9.6
Apache » Apr-Util » Version: 0.9.7

cpe:2.3:a:apache:apr-util:0.9.7
Apache » Apr-Util » Version: 0.9.8

cpe:2.3:a:apache:apr-util:0.9.8
Apache » Apr-Util » Version: 0.9.9

cpe:2.3:a:apache:apr-util:0.9.9
Apache » Apr-Util » Version: 1.0

cpe:2.3:a:apache:apr-util:1.0
Apache » Apr-Util » Version: 1.0.0

cpe:2.3:a:apache:apr-util:1.0.0
Apache » Apr-Util » Version: 1.0.1

cpe:2.3:a:apache:apr-util:1.0.1
Apache » Apr-Util » Version: 1.0.2

cpe:2.3:a:apache:apr-util:1.0.2
Apache » Apr-Util » Version: 1.1.0

cpe:2.3:a:apache:apr-util:1.1.0
Apache » Apr-Util » Version: 1.1.1

cpe:2.3:a:apache:apr-util:1.1.1
Apache » Apr-Util » Version: 1.1.2

cpe:2.3:a:apache:apr-util:1.1.2
Apache » Apr-Util » Version: 1.2.1

cpe:2.3:a:apache:apr-util:1.2.1
Apache » Apr-Util » Version: 1.2.10

cpe:2.3:a:apache:apr-util:1.2.10
Apache » Apr-Util » Version: 1.2.11

cpe:2.3:a:apache:apr-util:1.2.11
Apache » Apr-Util » Version: 1.2.12

cpe:2.3:a:apache:apr-util:1.2.12
Apache » Apr-Util » Version: 1.2.13

cpe:2.3:a:apache:apr-util:1.2.13
Apache » Apr-Util » Version: 1.2.2

cpe:2.3:a:apache:apr-util:1.2.2
Apache » Apr-Util » Version: 1.2.3

cpe:2.3:a:apache:apr-util:1.2.3
Apache » Apr-Util » Version: 1.2.4

cpe:2.3:a:apache:apr-util:1.2.4
Apache » Apr-Util » Version: 1.2.5

cpe:2.3:a:apache:apr-util:1.2.5
Apache » Apr-Util » Version: 1.2.6

cpe:2.3:a:apache:apr-util:1.2.6
Apache » Apr-Util » Version: 1.2.7

cpe:2.3:a:apache:apr-util:1.2.7
Apache » Apr-Util » Version: 1.2.8

cpe:2.3:a:apache:apr-util:1.2.8
Apache » Apr-Util » Version: 1.2.9

cpe:2.3:a:apache:apr-util:1.2.9
Apache » Apr-Util » Version: 1.3.0

cpe:2.3:a:apache:apr-util:1.3.0
Apache » Apr-Util » Version: 1.3.1

cpe:2.3:a:apache:apr-util:1.3.1
Apache » Apr-Util » Version: 1.3.2

cpe:2.3:a:apache:apr-util:1.3.2
Apache » Apr-Util » Version: 1.3.3

cpe:2.3:a:apache:apr-util:1.3.3
Apache » Apr-Util » Version: 1.3.4

cpe:2.3:a:apache:apr-util:1.3.4
Apache » Apr-Util » Version: 1.3.5

cpe:2.3:a:apache:apr-util:1.3.5
Apache » Apr-Util » Version: 1.3.6

cpe:2.3:a:apache:apr-util:1.3.6
Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.10

cpe:2.3:a:apache:http_server:2.2.10
Apache » Http Server » Version: 2.2.11

cpe:2.3:a:apache:http_server:2.2.11
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4
Apache » Http Server » Version: 2.2.5

cpe:2.3:a:apache:http_server:2.2.5
Apache » Http Server » Version: 2.2.6

cpe:2.3:a:apache:http_server:2.2.6
Apache » Http Server » Version: 2.2.7

cpe:2.3:a:apache:http_server:2.2.7
Apache » Http Server » Version: 2.2.8

cpe:2.3:a:apache:http_server:2.2.8
Apache » Http Server » Version: 2.2.9

cpe:2.3:a:apache:http_server:2.2.9
Oracle » Http Server » Version: N/A

cpe:2.3:a:oracle:http_server:-
Apple » Mac Os X » Version: N/A

cpe:2.3:o:apple:mac_os_x:-
Apple » Mac Os X » Version: 10.0

cpe:2.3:o:apple:mac_os_x:10.0
Apple » Mac Os X » Version: 10.0.0

cpe:2.3:o:apple:mac_os_x:10.0.0
Apple » Mac Os X » Version: 10.0.1

cpe:2.3:o:apple:mac_os_x:10.0.1
Apple » Mac Os X » Version: 10.0.2

cpe:2.3:o:apple:mac_os_x:10.0.2
Apple » Mac Os X » Version: 10.0.3

cpe:2.3:o:apple:mac_os_x:10.0.3
Apple » Mac Os X » Version: 10.0.4

cpe:2.3:o:apple:mac_os_x:10.0.4
Apple » Mac Os X » Version: 10.1

cpe:2.3:o:apple:mac_os_x:10.1
Apple » Mac Os X » Version: 10.1.0

cpe:2.3:o:apple:mac_os_x:10.1.0
Apple » Mac Os X » Version: 10.1.1

cpe:2.3:o:apple:mac_os_x:10.1.1
Apple » Mac Os X » Version: 10.1.2

cpe:2.3:o:apple:mac_os_x:10.1.2
Apple » Mac Os X » Version: 10.1.3

cpe:2.3:o:apple:mac_os_x:10.1.3
Apple » Mac Os X » Version: 10.1.4

cpe:2.3:o:apple:mac_os_x:10.1.4
Apple » Mac Os X » Version: 10.1.5

cpe:2.3:o:apple:mac_os_x:10.1.5
Apple » Mac Os X » Version: 10.2

cpe:2.3:o:apple:mac_os_x:10.2
Apple » Mac Os X » Version: 10.2.0

cpe:2.3:o:apple:mac_os_x:10.2.0
Apple » Mac Os X » Version: 10.2.1

cpe:2.3:o:apple:mac_os_x:10.2.1
Apple » Mac Os X » Version: 10.2.2

cpe:2.3:o:apple:mac_os_x:10.2.2
Apple » Mac Os X » Version: 10.2.3

cpe:2.3:o:apple:mac_os_x:10.2.3
Apple » Mac Os X » Version: 10.2.4

cpe:2.3:o:apple:mac_os_x:10.2.4
Apple » Mac Os X » Version: 10.2.5

cpe:2.3:o:apple:mac_os_x:10.2.5
Apple » Mac Os X » Version: 10.2.6

cpe:2.3:o:apple:mac_os_x:10.2.6
Apple » Mac Os X » Version: 10.2.7

cpe:2.3:o:apple:mac_os_x:10.2.7
Apple » Mac Os X » Version: 10.2.8

cpe:2.3:o:apple:mac_os_x:10.2.8
Apple » Mac Os X » Version: 10.3

cpe:2.3:o:apple:mac_os_x:10.3
Apple » Mac Os X » Version: 10.3.0

cpe:2.3:o:apple:mac_os_x:10.3.0
Apple » Mac Os X » Version: 10.3.1

cpe:2.3:o:apple:mac_os_x:10.3.1
Apple » Mac Os X » Version: 10.3.2

cpe:2.3:o:apple:mac_os_x:10.3.2
Apple » Mac Os X » Version: 10.3.3

cpe:2.3:o:apple:mac_os_x:10.3.3
Apple » Mac Os X » Version: 10.3.4

cpe:2.3:o:apple:mac_os_x:10.3.4
Apple » Mac Os X » Version: 10.3.5

cpe:2.3:o:apple:mac_os_x:10.3.5
Apple » Mac Os X » Version: 10.3.6

cpe:2.3:o:apple:mac_os_x:10.3.6
Apple » Mac Os X » Version: 10.3.7

cpe:2.3:o:apple:mac_os_x:10.3.7
Apple » Mac Os X » Version: 10.3.8

cpe:2.3:o:apple:mac_os_x:10.3.8
Apple » Mac Os X » Version: 10.3.9

cpe:2.3:o:apple:mac_os_x:10.3.9
Apple » Mac Os X » Version: 10.4

cpe:2.3:o:apple:mac_os_x:10.4
Apple » Mac Os X » Version: 10.4.0

cpe:2.3:o:apple:mac_os_x:10.4.0
Apple » Mac Os X » Version: 10.4.1

cpe:2.3:o:apple:mac_os_x:10.4.1
Apple » Mac Os X » Version: 10.4.10

cpe:2.3:o:apple:mac_os_x:10.4.10
Apple » Mac Os X » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x:10.4.11
Apple » Mac Os X » Version: 10.4.2

cpe:2.3:o:apple:mac_os_x:10.4.2
Apple » Mac Os X » Version: 10.4.3

cpe:2.3:o:apple:mac_os_x:10.4.3
Apple » Mac Os X » Version: 10.4.4

cpe:2.3:o:apple:mac_os_x:10.4.4
Apple » Mac Os X » Version: 10.4.5

cpe:2.3:o:apple:mac_os_x:10.4.5
Apple » Mac Os X » Version: 10.4.6

cpe:2.3:o:apple:mac_os_x:10.4.6
Apple » Mac Os X » Version: 10.4.7

cpe:2.3:o:apple:mac_os_x:10.4.7
Apple » Mac Os X » Version: 10.4.8

cpe:2.3:o:apple:mac_os_x:10.4.8
Apple » Mac Os X » Version: 10.4.9

cpe:2.3:o:apple:mac_os_x:10.4.9
Apple » Mac Os X » Version: 10.5

cpe:2.3:o:apple:mac_os_x:10.5
Apple » Mac Os X » Version: 10.5.0

cpe:2.3:o:apple:mac_os_x:10.5.0
Apple » Mac Os X » Version: 10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.1
Apple » Mac Os X » Version: 10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.2
Apple » Mac Os X » Version: 10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.3
Apple » Mac Os X » Version: 10.5.4

cpe:2.3:o:apple:mac_os_x:10.5.4
Apple » Mac Os X » Version: 10.5.5

cpe:2.3:o:apple:mac_os_x:10.5.5
Apple » Mac Os X » Version: 10.5.6

cpe:2.3:o:apple:mac_os_x:10.5.6
Apple » Mac Os X » Version: 10.5.7

cpe:2.3:o:apple:mac_os_x:10.5.7
Apple » Mac Os X » Version: 10.5.8

cpe:2.3:o:apple:mac_os_x:10.5.8
Apple » Mac Os X » Version: 10.6.0

cpe:2.3:o:apple:mac_os_x:10.6.0
Apple » Mac Os X » Version: 10.6.1

cpe:2.3:o:apple:mac_os_x:10.6.1
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04
Canonical » Ubuntu Linux » Version: 8.10

cpe:2.3:o:canonical:ubuntu_linux:8.10
Canonical » Ubuntu Linux » Version: 9.04

cpe:2.3:o:canonical:ubuntu_linux:9.04
Debian » Debian Linux » Version: 4.0

cpe:2.3:o:debian:debian_linux:4.0
Fedoraproject » Fedora » Version: 10

cpe:2.3:o:fedoraproject:fedora:10
Fedoraproject » Fedora » Version: 11

cpe:2.3:o:fedoraproject:fedora:11
Fedoraproject » Fedora » Version: 9

cpe:2.3:o:fedoraproject:fedora:9
Suse » Linux Enterprise Server » Version: 9

cpe:2.3:o:suse:linux_enterprise_server:9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1955

Products

Pricing

Contact Us