Apache – CVE-2009-1955

Description

Kayran has detected that the version of Apache APR-util being used has a flaw that could lead to a denial of service (DoS) attack.
The issue exists in the expat XML parser in the apr_xml_* interface in xml/apr_xml.c, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server. The issue presented in CVE-2009-1955 is similar to CVE-2003-1564.

A remote attacker could create a specially-crafted XML document that would cause excessive memory consumption (hence the denial of service) when processed by the XML decoding engine.
Demonstrated by a PROPFIND request.

This will cause a decrease in performance and also for interruptions in the availability of resources.

Recommendation

To fix CVE-2009-1955, upgrade the version of Apache Server being used to 2.2.12.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955

< Return to all Vulnerabilities

The Cloud

I’m pretty sure there isn’t a single adult in the world who hasn’t at least heard of The Cloud. Explaining “The Cloud” in 2022 may

Read More »

APT vs. ATP

In this article we will talk about APT vs. ATP. In other words, Advanced Persistent Threat and Advanced Threat Protection and the context between these

Read More »